[NBLUG/talk] SD card undelete

Hex hex at neg9.org
Sun Oct 6 10:17:55 PDT 2013


PhotoRec is probably the right answer here, so this is more of an FYI
for the future or anyone dealing with a more serious problem. In a
worst case scenario, foremost is sort of the generic forensic file
recovery utility.

http://foremost.sourceforge.net/

PhotoRec is probably going to give you the best results for this
situation, but foremost will work even if the partition table and
critical parts of your fs get b0rked.

Foremost will give you all the files ever, but will also give you a
lot of false positives. It's really a last resort type thing because
you have to spend a lot of time sorting through it's output to find
what you want.

On Sat, 5 Oct 2013 17:52:28 -0700
Andrew <argonaut at gmx.co.uk> wrote:

> E Frank Ball III wrote on Sat, 5 Oct 2013 15:39:06 -0700:
> 
> 
> > Try "testdisk" 
> > 
> > http://www.cgsecurity.org/wiki/Running_TestDisk
> > 
> > It's available in debian and ubuntu.
> 
> Actually, PhotoRec (also from CG Security) is what you want to
> use to recover deleted files. TestDisk is used to recover
> deleted or corrupted partition maps. Both are excellent tools
> for their respective tasks.
> 
> A.
> _______________________________________________
> talk mailing list
> talk at nblug.org
> http://nblug.org/cgi-bin/mailman/listinfo/talk
> 


-- 
Hex <hex at neg9.org>


More information about the talk mailing list