Daily Blog #221: Identifying deleted mlocate databases in RHEL v5 w/ ext3 #dfir ow.ly/t8n81
1
1
@HECFBlog Once you've found the starting block of the deleted mlocate DB by signature, use my frib tool to easily recover the file. Simple.
Jan 31, 2014 · 5:36 AM UTC
1
1