Difference between revisions of "Scalpel"
From Notes_Wiki
(Created page with "<yambe:breadcrumb>Recovery_tools|Recovery tools</yambe:breadcrumb> =scalpel= scalpel can be used for recovering deleted files. First edit /etc/scalpel/scalpel.conf and uncom...") |
m |
||
| Line 1: | Line 1: | ||
[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[Recovery tools]] > [[Scalpel]] | |||
scalpel can be used for recovering deleted files. First edit /etc/scalpel/scalpel.conf and uncomment most desired extensions to be recovered. Then create an image for partition where files to be recovered using [[testdisk]]. Finally use: | scalpel can be used for recovering deleted files. First edit /etc/scalpel/scalpel.conf and uncomment most desired extensions to be recovered. Then create an image for partition where files to be recovered using [[testdisk]]. Finally use: | ||
| Line 8: | Line 7: | ||
Some steps learned from http://opensourceforu.efytimes.com/2011/09/recover-deleted-files-in-linux/ | Some steps learned from http://opensourceforu.efytimes.com/2011/09/recover-deleted-files-in-linux/ | ||
[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[Recovery tools]] > [[Scalpel]] | |||
Latest revision as of 13:54, 24 August 2022
Home > CentOS > CentOS 6.x > Recovery tools > Scalpel
scalpel can be used for recovering deleted files. First edit /etc/scalpel/scalpel.conf and uncomment most desired extensions to be recovered. Then create an image for partition where files to be recovered using testdisk. Finally use:
scalpel image.dd -o <output-directory>
Some steps learned from http://opensourceforu.efytimes.com/2011/09/recover-deleted-files-in-linux/
Home > CentOS > CentOS 6.x > Recovery tools > Scalpel
