Foremost

From Notes_Wiki
Revision as of 13:57, 24 August 2022 by Saurabh (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Home > CentOS > CentOS 6.x > Recovery tools > Foremost

foremost can be used for recovering deleted files. First create an image for partition where files to be recovered using testdisk. Then use:

foremost -t all -i image.dd -o <output-directory>

Some steps learned from http://opensourceforu.efytimes.com/2011/09/recover-deleted-files-in-linux/


Home > CentOS > CentOS 6.x > Recovery tools > Foremost