Recover

From Halfface
Jump to navigation Jump to search

recover deleted files

Install photorec

yum install testdisk

Install ddrescue

yum install ddrescue

Read disk.

sudo ddrescue /dev/sdb1 /temp/sdb1

photorec

sudo photorec /temp/sdd1

Recover files from disk image.

sleuthkit

List files

fls -f fat -r sdd1 | less

Recover files.

icat -f fat -r sdd1 9748 > recoverd.file