| Author |
Message |
   
Krzysztof Adamski
Username: chris
Registered: N/A
| | Posted on Monday, Oct 27, 2008 - 20:40: | |
I'd like to recover only such files which have been deleted in the specific period. How it can be done in the simplest way? I use X-Ways Forensic edition. Thanx  |
   
Stefan Fleischmann
Username: admin
Registered: 1-2001
| | Posted on Monday, Oct 27, 2008 - 21:43: | |
A deletion date and time is available on certain file systems only (Ext2, Ext3, Ext4 in the obviously named timestamp column; and for NTFS only if covered by $LogFile, see there). |
   
Krzysztof Adamski
Username: chris
Registered: N/A
| | Posted on Thursday, Oct 30, 2008 - 3:47: | |
I understand Thanx very much |
|