Difference between revisions of "Grep for file recovery"
From Notes_Wiki
(Created page with "<yambe:breadcrumb>Recovery_tools|Recovery tools</yambe:breadcrumb> =grep for file recovery= We can use grep such as: <pre> grep -a -C 100 'containing string' /dev/sda1 > grep_...") |
(No difference)
|
Revision as of 13:13, 14 October 2015
<yambe:breadcrumb>Recovery_tools|Recovery tools</yambe:breadcrumb>
grep for file recovery
We can use grep such as:
grep -a -C 100 'containing string' /dev/sda1 > grep_result.txt
for recovering file when we know some significant text that is present in the file to be recovered
Something much more comprehensive for smaller partitions can be done using:
strings image.dd > strings_result.txt
