Grep for file recovery

From Notes_Wiki

Home > CentOS > CentOS 6.x > Recovery tools > Grep for file recovery

We can use grep such as:

grep -a -C 100 'containing string' /dev/sda1 > grep_result.txt

for recovering file when we know some significant text that is present in the file to be recovered

Something much more comprehensive for smaller partitions can be done using:

strings image.dd > strings_result.txt



Home > CentOS > CentOS 6.x > Recovery tools > Grep for file recovery