extundelete Logo

extundelete

0
Free
Visit Website

extundelete is a utility that can recover deleted files from an ext3 or ext4 partition. The ext3 and ext4 file systems are the most common default file systems in Linux distributions like Mint, Mageia, or Ubuntu. extundelete uses information stored in the partition's journal to attempt to recover a file that has been deleted from the partition. There is no guarantee that any particular file will be able to be undeleted, so always try to have a good backup system in place, or at least put one in place after recovering your files! The latest version of extundelete is 0.2.4, which was released in January 2013. extundelete has been recovering deleted files since April 2009, when the first version was released.

FEATURES

ALTERNATIVES

A command-line utility to show and change EXIF information in JPEG files

A command-line utility and Python package for mounting and unmounting various disk image formats with support for different volume systems and filesystems.

Accessing databases stored on a machine by the Chrome browser and dumping URLs found.

Highlighter is a FireEye Market app that integrates with FireEye products to provide enhanced cybersecurity capabilities.

Rekall is a discontinued project that aimed to improve memory analysis methodology but faced challenges due to the nature of in-memory structure and increasing security measures.

Create checkpoint snapshots of the state of running pods for later off-line analysis.

A forensic analysis tool that extracts and parses logs, notifications, and system information from iOS/iPadOS devices and backups.

Turbinia is an open-source framework for automating the running of common forensic processing tools to help with processing evidence in the Cloud.