PaulDotCom mailing list archives

foremost and data forensics

From: mike.mikemiller at gmail.com (Michael Miller)
Date: Tue, 19 Jan 2010 13:12:14 -0800

If the system in question is using LVM on Linux I would suggest using
System Rescue CD. http://www.sysresccd.org/Main_Page

I use it all the time and it's updated on a regular basis.  Anyway how
to get at a LVM volume.

Boot from CD.
at the root prompt enter
#pvscan
That will show all of the physical volumes under LVM and the volume groups.
You can now run vgscan
#vgscan
vgscan finds the volume groups so you can now run lvscan
#lvscan
lvscan will report all the logical volumes on the disk.

Current thread:

foremost and data forensics Monkey Daemon (Jan 18)
- foremost and data forensics Tim Krabec (Jan 18)
  - foremost and data forensics Monkey Daemon (Jan 19)
    - foremost and data forensics Tim Krabec (Jan 19)
    - foremost and data forensics Carlos Ayala (Jan 19)
    - foremost and data forensics Matt Erasmus (Jan 19)
    - foremost and data forensics Michael Miller (Jan 19)
    - foremost and data forensics Jim Halfpenny (Jan 19)