Automated Undelete

Using TestDisk to undelete files
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
patrickdalla
Posts: 1
Joined: 18 Jun 2015, 14:44

Automated Undelete

#1 Post by patrickdalla »

Hello,

I want to make a script to automatically undelete all the files marked as deleted on any type of file systems on all the partitions of a block device into a specified destination folder, if possible, reconstructing the complete path.

Is it possible with testdisk?

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Automated Undelete

#2 Post by cgrenier »

Using latest 7.1-WIP, to recover all deleted files from the first partition from the image file 7-ntfs-undel.dd, run

Code: Select all

testdisk /cmd 7-ntfs-undel.dd advanced,undelete,allundelete
It works for NTFS partition only.
See http://www.cgsecurity.org/wiki/Scripted_run for how to script TestDisk.

TestDisk can also undeletes files from FAT12/16/32, exFAT, ext2 filesystem but the code to script it is currently missing.

Locked