Foremost

From Notes_Wiki

Home > CentOS > CentOS 6.x > Recovery tools > Foremost

foremost can be used for recovering deleted files. First create an image for partition where files to be recovered using testdisk. Then use:

foremost -t all -i image.dd -o <output-directory>

Some steps learned from http://opensourceforu.efytimes.com/2011/09/recover-deleted-files-in-linux/


Home > CentOS > CentOS 6.x > Recovery tools > Foremost