Scalpel

From Notes_Wiki
Revision as of 13:12, 14 October 2015 by Saurabh (talk | contribs) (Created page with "<yambe:breadcrumb>Recovery_tools|Recovery tools</yambe:breadcrumb> =scalpel= scalpel can be used for recovering deleted files. First edit /etc/scalpel/scalpel.conf and uncom...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

<yambe:breadcrumb>Recovery_tools|Recovery tools</yambe:breadcrumb>

scalpel

scalpel can be used for recovering deleted files. First edit /etc/scalpel/scalpel.conf and uncomment most desired extensions to be recovered. Then create an image for partition where files to be recovered using testdisk. Finally use:

scalpel image.dd -o <output-directory>

Some steps learned from http://opensourceforu.efytimes.com/2011/09/recover-deleted-files-in-linux/