Difference between revisions of "Scalpel"

From Notes_Wiki
(Created page with "<yambe:breadcrumb>Recovery_tools|Recovery tools</yambe:breadcrumb> =scalpel= scalpel can be used for recovering deleted files. First edit /etc/scalpel/scalpel.conf and uncom...")
 
m
 
Line 1: Line 1:
<yambe:breadcrumb>Recovery_tools|Recovery tools</yambe:breadcrumb>
[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[Recovery tools]] > [[Scalpel]]
=scalpel=


scalpel can be used for recovering deleted files.  First edit /etc/scalpel/scalpel.conf and uncomment most desired extensions to be recovered.  Then create an image for partition where files to be recovered using [[testdisk]].  Finally use:
scalpel can be used for recovering deleted files.  First edit /etc/scalpel/scalpel.conf and uncomment most desired extensions to be recovered.  Then create an image for partition where files to be recovered using [[testdisk]].  Finally use:
Line 8: Line 7:


Some steps learned from http://opensourceforu.efytimes.com/2011/09/recover-deleted-files-in-linux/
Some steps learned from http://opensourceforu.efytimes.com/2011/09/recover-deleted-files-in-linux/
[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[Recovery tools]] > [[Scalpel]]

Latest revision as of 13:54, 24 August 2022

Home > CentOS > CentOS 6.x > Recovery tools > Scalpel

scalpel can be used for recovering deleted files. First edit /etc/scalpel/scalpel.conf and uncomment most desired extensions to be recovered. Then create an image for partition where files to be recovered using testdisk. Finally use:

scalpel image.dd -o <output-directory>

Some steps learned from http://opensourceforu.efytimes.com/2011/09/recover-deleted-files-in-linux/



Home > CentOS > CentOS 6.x > Recovery tools > Scalpel