Recovery tools
From Notes_Wiki
<yambe:breadcrumb>Main Page | Home</yambe:breadcrumb>
recovery tools
All recovery should be performed using live boot with read-only mounting only. Do not boot into OS where files where deleted for recovery. Latest distribution of Kali Linux should contain most of these tools pre-installed.
Tools for recovering lost files on ext3 partitions
Following recovery tools exist to help with recovery of deleted files on ext3 filesystem.
- r-linux
- extundelete
- photorec
- foremost
- scrounge-ntfs
- grep for file recovery
- scalpel
- tsk_recover
- magicrescue
- ripper
- unrm
- gET iT i sAY-giis
- e2undel
- ext3undel
- autopsy
- ext4magic
Tools for renaming and sorting recovered files
- findup (from the fslint software package)
- A wikipage of suggestions - http://www.cgsecurity.org/wiki/After_Using_PhotoRec
- jhead
- easytag
Tools for recovering deleted/formatted partitions
Links at https://help.ubuntu.com/community/DataRecovery has good information about using some of these tools.