Skip to content

Latest commit

 

History

History
29 lines (23 loc) · 1.29 KB

README.md

File metadata and controls

29 lines (23 loc) · 1.29 KB

python-sleuthkit-recover

Linux command line thumbstick file recovery script using SleuthKit

Features

  1. Recover accidentaly deleted files from your thumbstick
  2. Choose which files to recover

What won't work

  1. Recover files from unallocated [or] deleted partitions

To Run this file,

  1. Make sure SleuthKit and Python 3.x is installed
  2. Clone/Download this repo
  3. Run the recover.py script
      python3 recover.py
  4. Select the partition with the deleted file using the corresponding number
  5. Give a name for the temporary image of the partiton that will be created. This file will be as large as the partition. THIS PROCESS WILL TAKE TIME. DON'T PANIC!
  6. Select the file to recover using the corresponding number

Versions

Contact Me: Telegram