Professional Documents
Culture Documents
1. Plug in your USB flash disk and ensure it is detected by your VMware virtual machine.
2. To find your USB drive path in Linux open the terminal console and type fdisk l
Note: your USB drive type will be normally FAT32
5. Open the console and type foremost h to see different options are available with
foremost command
6. Now type the following command to recover the deleted files and save them in a
recovery folder which you have created on the desktop.
Foremost t all v i /dev/sdb1 -0 root/Desktop/recovery/
8. After finishing go to your recovery folder and analyse the files recovered.