Re: Disparition de /root

[Bernard Schoenacker <bernard.schoenacker@free.fr>]

Le Mon, 15 Oct 2012 17:35:50 +0200,
Steve Fouchet <wakserz@gmail.com> a écrit :

> sleuthkit

bonjour,

	je ne trouve pas de paquet se nommant autopsie mais autopsy ...

	apt-cache search autopsy
	autopsy - graphical interface to SleuthKit

	revenons à l'origine :

	soit un utilisateur ayant supprimé le /root et recherchant
	simplement à récupérer des fichiers supprimées (deleted files); Je
	propose d'employer un outil "undelete"

 1° solution:
 	apt-cache search undelete
	extundelete - utility to recover deleted files from ext3/ext4 partition
	testdisk - Partition scanner and disk recovery tool

 2° solution:
 	apt-cache search file recovery |grep tool
	gddrescue - GNU data recovery tool
	testdisk - Partition scanner and disk recovery tool
	workrave-data - Repetitive Strain Injury prevention tool (data files)


 3° solution:

 ext3grep - Tool to help recover deleted files on ext3 filesystems

 solution proposée et retenue :

	extundelete - utility to recover deleted files from ext3/ext4 partition
	ext3grep - Tool to help recover deleted files on ext3 filesystems

	bonne chance

	slt
	bernard