![]() ![]() Use up/down arrow keys to select the disk that holds the lost files. To recover files from other devices, run photorec device.įorensics users can use the parameter /log to create a log file named photorec.log it records the location of the files recovered by PhotoRec.Īvailable media are listed. Most devices should be autodetected including Linux software RAID (that is, /dev/md0) and file system encrypted with cryptsetup, dm-crypt, LUKS or TrueCrypt (ie. photorec '/cygdrive/d/evidence/image.?' if the Encase image is split into several files in the directory d:\evidence.photorec 'image.?' if the Encase image is split into several files.photorec image.E01 to recover files from an Encase EWF image.photorec image.dd to carve a raw disk image.Under OS/2, PhotoRec doesn't handle physical devices, only disk images.Sudo will ask for a password - enter your Mac OS X user password. If you are not root, PhotoRec will restart itself using sudo after a confirmation on your part. Under Mac OS X, start PhotoRec (ie testdisk-6.13/photorec). ![]()
0 Comments
Leave a Reply. |