Closed Ricky-Tigg closed 3 years ago
Use PhotoRec on the free space of the partition
Extracts from https://www.cgsecurity.org/testdisk.pdf "ext2 is a Linux filesystem. It has been superseded by ext3 and ext4, so it’s not found often now. With ext3 and ext4, it’s possible to find the names of the deleted files but the location of the deleted data isn’t available anymore, so even if ext3/ext4 is similar to ext2, it’s not possible to recover lost files using TestDisk."
"PhotoRec doesn’t recover the original filenames or the file structure but it can recover lost files even from corrupted filesystem. PhotoRec is a signature based file recovery utility (a file carver) and may be able to recover your data where other methods failed. Remember, you must avoid writing anything on the filesystem that was holding the data. If you do, deleted files may be overwritten by new ones."
OS: Fedora; Component testdisk.x86_64 7.1-3.fc32
Hey. Files on an EXT4-formatted partition of an external USB device were deleted with option "Delete permanently" in graphical resources manager. Read-only recovered files are empty.
Commands executed: