Channel16 is graphical tool that allows users to browse the content of deleted files in an ext2 filesystem interactively, and to recover them into new files. The application also provides a search and rescue operation. This allows the user to input some exact text from the deleted file, which the program uses to search through all deleted inodes. Channel16 uses the low-level methods provided by e2fsprogs. The front end is implemented with Java Swing, and Java Native Interface (JNI) is used to bridge between Java and the ext2fs operations.
Chiron FS is a FUSE based filesystem that implements replication at the filesystem level like RAID 1 does at the device level. The replicated filesystem may be of any kind you want; the only requisite is that you mount it. There is no need for special configuration files; the setup is as simple as one mount command (or one line in fstab).
DFF (Digital Forensics Framework) is a simple but powerful tool with a flexible module system which will help you in your digital forensics works, including file recovery due to error or crash, evidence research and analysis, etc. DFF provides a robust architecture and some handy modules.
GRUB for DOS is a rebuild of the GNU GRUB boot manager for DOS, and can be run under real mode DOS. It also has many new features. It can be booted through BOOT.INI of Windows (grldr) and kexec of Linux (grub.exe). It can directly boot NTLDR (WindowsNT/2K/XP), IO.SYS (Windows9x/Me) and KERNEL.SYS (FreeDOS). The disk emulation feature is another enhancement over GNU GRUB, and can be used to run legacy DOS/Windows9x systems with floppy or hard disk images.
Hot Copy creates an instant point-in-time snapshot of any block device while the system is running without interrupting applications or requiring the use of LVM. As block level changes are made to the real device, hot copy makes a backup copy of the changed block. The changed blocks are efficiently stored in unused space on your hard disk. These stored changed blocks maintain a point-in-time snapshot and space is only needed when you make changes to the real device. You can even write to your snapshots.
INSERT (the Inside Security Rescue Toolkit) aims to be a multi-functional, multi-purpose disaster recovery and network analysis system. It boots from a credit card-sized CD-ROM and is basically a stripped-down version of Knoppix. It features good hardware detection, fluxbox, emelfm, links-hacked, ssh, tcpdump, nmap, chntpwd, and much more. It provides full read-write support for NTFS partitions (using ntfs-3g), and the ClamAV virus scanner (including a fairly recent signature database and a GUI). It provides partition handling with gParted and also has a network boot facility.