Thursday, June 2, 2011

undelete files from a VFAT partition

Use testdisk:
sudo testdisk /dev/sdb

Basically:
- select the partition and type (Intel)
- select advanced operation, then select undelete
- find the files to undelete and press c (copy), choose where to copy
- done!

More details here:
http://www.cgsecurity.org/wiki/TestDisk:_undelete_file_for_FAT

No comments:

Post a Comment