cgsecurity.org

1) Is it possible to undelete ALL files from a partition?

2) Is it possible to undelete all files with a certain extension?

3) Is it possible to put the undeleted files in a different destination?

I have an image of a FAT32 partition. I am looking for some txt files, that were deleted by accident, some time ago. I don't know the location nor the file names. I know some strings that are in the files. So I would like to undelete all txt files and put them in a separate directory. Then I can use grep to search for the string in these files.

You can use TestDisk to copy all files, deleted and non-deleted, from a FAT32 partition to another disk: run TestDisk, Advanced, Undelete, 'a' to select everything, 'C' (case sensitive) to copy the selection.

The directory structure will be remains the same. There will be no difference between deleted and non-deleted

Ok, thanks.