Grep for file recovery
From Notes_Wiki
<yambe:breadcrumb>Recovery_tools|Recovery tools</yambe:breadcrumb>
grep for file recovery
We can use grep such as:
grep -a -C 100 'containing string' /dev/sda1 > grep_result.txt
for recovering file when we know some significant text that is present in the file to be recovered
Something much more comprehensive for smaller partitions can be done using:
strings image.dd > strings_result.txt