Tag Archives: find

Restoring files under linux

Find packet of utilites to restoring named
app-forensics/sleuthkit
and install it.

For UBUNTU and others plase find it manually like apt-get search sleuthkit.

The next you can find files. Type 
fls -rd /dev/sda1

To restore files you can do:
for i in $(fls -rd /dev/sda1 |awk {'print $3'}|tr -d [:]); do icat -r -f ext /dev/sda1 $i > /home/yuri/photo/$i.jpg;done

Hear is supported file systems:
icat -f list