Christian :
Perhaps there are still some people searching for the solution. There is a tool for this problem: SleuthKit Tools.\n\nGiven an byte offset from the beginning of the partition table you have to divide it by the block size of your NTFS-Partition (usually 4096).\n\nifind /dev/... -d block_offset => inode_number\n\nffind /dev/... inode_number => Location of file",
2015-08-23T12:37:56