Difference between revisions of "Foremost"
From Notes_Wiki
(Created page with "<yambe:breadcrumb>Recovery_tools|Recovery tools</yambe:breadcrumb> =foremost= foremost can be used for recovering deleted files. First create an image for partition where fi...") |
(No difference)
|
Revision as of 13:12, 14 October 2015
<yambe:breadcrumb>Recovery_tools|Recovery tools</yambe:breadcrumb>
foremost
foremost can be used for recovering deleted files. First create an image for partition where files to be recovered using testdisk. Then use:
foremost -t all -i image.dd -o <output-directory>
Some steps learned from http://opensourceforu.efytimes.com/2011/09/recover-deleted-files-in-linux/
