Description: fatback is a tool in Backtrack 5 which is used to recover the deleted files from FAT(file Allocation Table ) file system.
Here fatback first read the FAT image file system then it will recovered all deleted file .
This tool was developed in year 2000-2001 at DoD (Department of Defence ) Computer Forensic Lab by SrA Nicholas Harbour.
fatback is also useful for investigation windows filesystem .
in this video I take a look at Fatback which is a forensics tool used for file carving on the Backtrack 5 operating system. Fatback searches a FAT filesystem for files flagged for deletion and recovers those files. For more information visit Lecture Snippets at http://lecturesnippets.com
Disclaimer: We are a infosec video aggregator and this video is linked from an external website. The original author may be different from the user re-posting/linking it here. Please do not assume the authors to be same without verifying.
will it work for ntfs ?? if not then any other tool for this purpose ?
thanks
@hackmaan No, This tool is for only fat file system :)
you can use Recuva Awesome data recovery tool(Windows) :D
http://www.piriform.com/recuva
Thanks tinitee :) Recuva is an awesome tool :D