search for: unrm

...ng a proper > shutdown can overwrite some of the data. > > 2) Remove the drive/drives and hook them up to another system. > > 3) Mount the filesystem(s) read-only. > > 4) Download and compile The Coroner's Toolkit, which contains a couple > of utilities you will need: unrm and lazarus. You can get TCT at: > http://www.fish.com/tct/ . You may also want to get TCTUTILs from > http://www.cerias.purdue.edu/homes/carrier/forensics/ to get a nicer > interface for TCT. > > 5) Read http://www.fish.com/tct/help-recovering-file for a walkthrough. > > I d...

...t; > > > 2) Remove the drive/drives and hook them up to another system. > > > > > > 3) Mount the filesystem(s) read-only. > > > > > > 4) Download and compile The Coroner's Toolkit, which contains a couple > > > of utilities you will need: unrm and lazarus. You can get TCT at: > > > http://www.fish.com/tct/ . You may also want to get TCTUTILs from > > > http://www.cerias.purdue.edu/homes/carrier/forensics/ to get a nicer > > > interface for TCT. > > > > > > 5) Read http://www.fish.com/tct/help...

...an delete a record from a database and then still do a recovery if needed within a given retention time period. Perhaps a soft-deletion feature to ZFS would be nice. It would allow a sysadmin or maybe even a user to delete something and then come back later, check a deletion log and possibly just unrm the file. Dennis