Many thanks for these replies. Directory Snoop
(http://www.briggsoft.com/dsnoop.htm) does indeed appear to be able to
read and save both fat tables and number clusters and this with
directory scan information from active@undelete should be enough to
piece everything together. The active undelete documentation includes a
nice summary of FAT structure with some links to Micosoft resources
that I have still to follow. One again many thanks.

David