PhotoRec: an alternative to foremost for recovering deleted files
Table of Contents
PhotoRec is part of the
testdisk is available on most Linux-based systems.
Using PhotoRec is pretty simple (run with ‘sudo’ or as root):
# photorec /dev/sdb
- If a disk image (e.g.: ‘mydisk.img’) is used, you don’t need to run PhotoRec as root.
The device needs not to be mounted. Specify a device name, not a partition name. You can also run
photorec without arguments (in that case, you can choose which device to use).
Now, just follow the prompts: select if you want to search within a partition or all the disk, the filesystem type, whether to scan all space or only the free one and where you want to save the files (a new folder will be created, always use a different partition/device to save the recovered files). Notice the folder will be owned by the root user (you can change the owner later with
If you have any suggestion, feel free to contact me via social media or email.
Latest tutorials and articles: