foremost recover linux files

foremost is a forensics application to recover files based on their headers, footers, and internal data structures. Foremost can work on image files, such as those generated by dd, Safeback, Encase, etc, or directly on a drive. This short article shows how you can use foremost to recover deleted files.

foremost -t jpeg -i /dev/vda3

 

Leave a Reply

Your email address will not be published. Required fields are marked *