Scalpel

Home > CentOS > CentOS 6.x > Recovery tools > Scalpel

scalpel can be used for recovering deleted files. First edit /etc/scalpel/scalpel.conf and uncomment most desired extensions to be recovered. Then create an image for partition where files to be recovered using testdisk. Finally use:

scalpel image.dd -o <output-directory>

Some steps learned from http://opensourceforu.efytimes.com/2011/09/recover-deleted-files-in-linux/

Home > CentOS > CentOS 6.x > Recovery tools > Scalpel