I'm trying to recover accidentally deleted Libreoffice and WP office *.docx and *.odt files from my documents directory in Manjaro. I was wondering if Foremost would be a good tool to attempt this and if so what the right command would be?
I have two SSD's. One SSD is the Manjaro drive /dev/sda1 where the target deleted files may still be and the other a formatted second internal drive /dev/sdb1 labelled lin2 where I wish to back up any recovered files.
I have created a directory called lin2/Recovery on sdb1 but I'm not sure of the right command to get Foremost to recover and back up any found files to that destination on the secondary drive. I have so far considered this command but its probably not whats needed. Any help would be appreciated. I'm brand new to using Linux forensic tools so please excuse my ignorance here.
Example:
sudo foremost -v -t doc -q -i /dev/sda1 -o /lin2/Recovery -T
I have two SSD's. One SSD is the Manjaro drive /dev/sda1 where the target deleted files may still be and the other a formatted second internal drive /dev/sdb1 labelled lin2 where I wish to back up any recovered files.
I have created a directory called lin2/Recovery on sdb1 but I'm not sure of the right command to get Foremost to recover and back up any found files to that destination on the secondary drive. I have so far considered this command but its probably not whats needed. Any help would be appreciated. I'm brand new to using Linux forensic tools so please excuse my ignorance here.
Example:
sudo foremost -v -t doc -q -i /dev/sda1 -o /lin2/Recovery -T
