Step 1: Install scalpel
# yum install scalpel
Step 2: Define the file type you wish to recover by uncommenting it.
# vim /etc/scalpel.conf
Step 3: Recover the file
# scalpel /dev/mapper/VolGroup00-LogVol00 -o output
Note:
- Make sure you do not have a directory output or scalpel will not work.
- Scalpel search by partition and not directory. So don't specify directory. It simply cannot work
- to know which partition yo have, type # mount
Article: For more information, see Recover Deleted Files With Scalpel by HowToForge
No comments:
Post a Comment