Difference between revisions of "Forensic: extundelete"

Revision as of 20:40, 23 June 2022

Install

apt -y install extundelete

Percobaan

mkfs.ext3 /dev/sdb1

Mount

mkdir /mnt/percobaan
mount /devsdb1 /mnt/percobaan

Copy/buat file

 cp file.txt /mnt/percobaan
 cp file.jpeg /mnt/percobaan

Delete

 rm /mnt/percobaan/*

Restore

 umount /mnt/percobaan
 extundelete /dev/sdb1 --restore-all

Hasilnya akan disimpan di current directory dengan folder

RECOVERED_FILES

Revision as of 20:40, 23 June 2022 (view source) Onnowpurbo (talk \| contribs) ← Older edit		Revision as of 20:40, 23 June 2022 (view source) Onnowpurbo (talk \| contribs) Newer edit →
Line 30:		Line 30:
	Hasilnya akan disimpan di current directory dengan folder		Hasilnya akan disimpan di current directory dengan folder

−	~~RECOVERD_FILES~~	+	RECOVERED_FILES