Recover Digisign Ssn with airSlate SignNow

Recover digisign ssn

[Music] [Music] welcome back everyone so today we're going to be doing some data recovery from a disk image inside Linux and I'm using a bun to a bun to Linux or Linux Mint actually as my forensic workstation and before we copied we acquired a disk image from our our hard drive our suspect disk connected to a a write blocker and now I have this suspect disk image and it's a about a four point one gigabyte suspect disk image and I'm inside have opened up a terminal or a command prompt and I'm inside the cases 0:01 images 0 0 1 folder and if we look at the directory and in Linux we list the directory using LS LS and that shows me all of the files inside this folder so LS s laha shows me a little bit more information about this this directory so here we have one image the image file inside and it's a DD image or a raw disk image and total about 3.8 gigabytes ok so right now we're just in the same directory and we are going to use the sleuth kit the sleuth kit newer versions I believe it's above version 4 have a tool called tsk underscore recover and tsk recover basically uses sleuth kit tools to be able to go through a disk image and look for allocated and unallocated it files and recover the data from those files the waste lists get works is very interesting and if we have time later we might go into it a little bit more in-depth but for now let's just use the tool tsk recover which is a relatively easy way to recover your data in Windows we were using a photo rec and photorec also works in Linux photorec will be installed by default in most Linux forensic distributions but the sleuth kit will also be installed in those distributions so let's go ahead and try so right now I'm in this the directory with with my image DD and that's the image that I want to be able to recover data from and our command that we're going to be using is TSK underscore recover tsk recover if we do dash H whenever you're running a command-line tool you can usually use dash H or possibly dash dash help but I believe in in sooth kit is just dash H and that will give you invalid option okay so that's if you give an Intel adoption it will also give you this help menu okay so whenever you're running a command line tool try to give it - a tour - - help and you might get a help menu here you should get a help menu you can also use the man command and man tsk recover to get more information about how to sk recover works so we will just use here and the the commands to give this so we want to run the...