Linux Forensics Tools Repository: Package Summary for Packages on January 17, 2011:

  • CERT-Forensics-Tools-1.0-22.fc{11,12,13,14}.noarch.rpm - This package was updated to reflect the addition of all of the following tool and supporting package:

    • gpart - gpart is a tool which tries to guess the primary partition table of a PC-type hard disk in case the primary partition table in sector 0 is damaged, incorrect or deleted. The guessed table can be written to a file or device. Supported (guessable) filesystem or partition types:
      • DOS/Windows FAT (FAT 12/16/32)
      • Linux ext2
      • Linux swap partitions versions 0 and 1 (Linux >= v2.2.X)
      • OS/2 HPFS
      • Windows NTFS
      • *BSD disklabels
      • Solaris/x86 disklabels
      • Minix FS
      • Reiser FS
      • Linux LVM physical volume module (LVM by Heinz Mauelshagen)