Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm working on recovering an image that had the partition table blown away. For other filesystems, I've been able to use Sleuthkit's sigfind and the default templates or specified offset/signature to pick up other filesystems, but I can't find any documentation on what (if any) unique hex patterns/offset will exist within a swap partition.

Obviously swap is very different from a filesystem, but I would assume there is still some moderately unique pattern somewhere in the partition, I just don't know what that would be. I've been googling for a few hrs with no luck so any suggestions would be very much appreciated.

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.