Next  Contents  Prev

Recovering deleted files from the Ext2fs


This talk is about how to recover deleted files after the event from the ext2fs the file system used commonly under Linux.

Always remembering that file recovery is not a replacement for a good backup system.

This talk will be in two parts with the first part covering the basic layout of ext2fs file system.

Before we start recovering files we will need to have a basic understanding of the under lying on disk structure of the ext2fs system. This because most tools presently around to allow you to recover disk files expect the user to have a knowledge of how the disk is laid out.

The talk will then touch on issues involved in recovering files and data from the ext2fs file system.

Next a discussion of the tools available to aid in this task.

Finally I will work though an example of using LDE to recover a deleted file.

Next  Contents  Prev