Scalpel

From Notes_Wiki
Revision as of 13:54, 24 August 2022 by Saurabh (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Home > CentOS > CentOS 6.x > Recovery tools > Scalpel

scalpel can be used for recovering deleted files. First edit /etc/scalpel/scalpel.conf and uncomment most desired extensions to be recovered. Then create an image for partition where files to be recovered using testdisk. Finally use:

scalpel image.dd -o <output-directory>

Some steps learned from http://opensourceforu.efytimes.com/2011/09/recover-deleted-files-in-linux/



Home > CentOS > CentOS 6.x > Recovery tools > Scalpel