You are on page 1of 1

Part 1: File Recovery

1. What is file recovery?


It is the process of rebuilding or recovering lost files from a disk or hard drive that is no longer
operational or has been damaged from unnatural causes.

Tutorial 1: To recover deleted files from USB flash disk in Linux OS

1. Plug in your USB flash disk and ensure it is detected by your VMware virtual machine.

2. To find your USB drive path in Linux open the terminal console and type fdisk l
Note: your USB drive type will be normally FAT32

3. Delete files from your USB drive

4. Create a recovery folder on the Desktop.. #mkdir recovery

5. Open the console and type foremost h to see different options are available with
foremost command

6. Now type the following command to recover the deleted files and save them in a
recovery folder which you have created on the desktop.
Foremost t all v i /dev/sdb1 -0 root/Desktop/recovery/

7. Now it will carve all the files we just deleted.

8. After finishing go to your recovery folder and analyse the files recovered.

You might also like