Forensic: extundelete: Difference between revisions

From OnnoCenterWiki
Jump to navigationJump to search
No edit summary
No edit summary
Line 26: Line 26:
   umount /mnt/percobaan
   umount /mnt/percobaan
   extundelete /dev/sdb1 --restore-all
   extundelete /dev/sdb1 --restore-all
Hasilnya akan disimpan di current directory dengan folder
RECOVERD_FILES

Revision as of 13:40, 23 June 2022

Install

apt -y install extundelete


Percobaan

mkfs.ext3 /dev/sdb1

Mount

mkdir /mnt/percobaan
mount /devsdb1 /mnt/percobaan

Copy/buat file

 cp file.txt /mnt/percobaan
 cp file.jpeg /mnt/percobaan

Delete

 rm /mnt/percobaan/*

Restore

 umount /mnt/percobaan
 extundelete /dev/sdb1 --restore-all


Hasilnya akan disimpan di current directory dengan folder

RECOVERD_FILES