extundelete Logo

extundelete

0
Free
Visit Website

extundelete is a utility that can recover deleted files from an ext3 or ext4 partition. The ext3 and ext4 file systems are the most common default file systems in Linux distributions like Mint, Mageia, or Ubuntu. extundelete uses information stored in the partition's journal to attempt to recover a file that has been deleted from the partition. There is no guarantee that any particular file will be able to be undeleted, so always try to have a good backup system in place, or at least put one in place after recovering your files! The latest version of extundelete is 0.2.4, which was released in January 2013. extundelete has been recovering deleted files since April 2009, when the first version was released.

FEATURES

ALTERNATIVES

A forensic research tool for gathering forensic traces on Android and iOS devices, supporting the use of public indicators of compromise.

Python tool for remote memory acquisition

A reverse engineering framework with a focus on usability and code cleanliness

A Windows Registry hive extraction library that reads and writes Windows Registry 'hive' binary files.

A library to access and parse Windows Shortcut File (LNK) format.

A file search and query tool for ops and security experts.

Tool for analyzing Windows Recycle Bin INFO2 file

A PowerShell-based incident response and live forensic data acquisition tool for Windows hosts.