Le Mon, 15 Oct 2012 17:35:50 +0200,
Steve Fouchet <wakserz@gmail.com> a écrit :
> sleuthkit
bonjour,
je ne trouve pas de paquet se nommant autopsie mais autopsy ...
apt-cache search autopsy
autopsy - graphical interface to SleuthKit
revenons à l'origine :
soit un utilisateur ayant supprimé le /root et recherchant
simplement à récupérer des fichiers supprimées (deleted files); Je
propose d'employer un outil "undelete"
1° solution:
apt-cache search undelete
extundelete - utility to recover deleted files from ext3/ext4 partition
testdisk - Partition scanner and disk recovery tool
2° solution:
apt-cache search file recovery |grep tool
gddrescue - GNU data recovery tool
testdisk - Partition scanner and disk recovery tool
workrave-data - Repetitive Strain Injury prevention tool (data files)
3° solution:
ext3grep - Tool to help recover deleted files on ext3 filesystems
solution proposée et retenue :
extundelete - utility to recover deleted files from ext3/ext4 partition
ext3grep - Tool to help recover deleted files on ext3 filesystems
bonne chance
slt
bernard
Archive: [🔎] 20121015200544.56a37436.bernard.schoenacker@free.fr" target="_blank">http://lists.debian.org/[🔎] 20121015200544.56a37436.bernard.schoenacker@free.fr