Difference between revisions of "Forensic: extundelete"
Jump to navigation
Jump to search
Onnowpurbo (talk | contribs) |
Onnowpurbo (talk | contribs) |
||
| Line 26: | Line 26: | ||
umount /mnt/percobaan | umount /mnt/percobaan | ||
extundelete /dev/sdb1 --restore-all | extundelete /dev/sdb1 --restore-all | ||
| + | |||
| + | |||
| + | Hasilnya akan disimpan di current directory dengan folder | ||
| + | |||
| + | RECOVERD_FILES | ||
Revision as of 20:40, 23 June 2022
Install
apt -y install extundelete
Percobaan
mkfs.ext3 /dev/sdb1
Mount
mkdir /mnt/percobaan mount /devsdb1 /mnt/percobaan
Copy/buat file
cp file.txt /mnt/percobaan cp file.jpeg /mnt/percobaan
Delete
rm /mnt/percobaan/*
Restore
umount /mnt/percobaan extundelete /dev/sdb1 --restore-all
Hasilnya akan disimpan di current directory dengan folder
RECOVERD_FILES