Timeline for Recover deleted files using foremost
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 14, 2016 at 16:30 | comment | added | Cbhihe |
@RakholiyaJenish: Running ntfsundeleteon a 1TB NTFS volume would take anywhere from 3 to 5 hours depending on yr hw and configuration specifics. Just make sure the recovery setup is UPS-powered. If it crashes for any reason, yr erased volume won't be hurt and you can later resume yr recovery from the last inode where a file was successfully recovered.
|
|
| Jun 6, 2015 at 16:29 | vote | accept | Rakholiya Jenish | ||
| Jun 6, 2015 at 16:23 | vote | accept | Rakholiya Jenish | ||
| Jun 6, 2015 at 16:23 | |||||
| Jun 6, 2015 at 16:23 | vote | accept | Rakholiya Jenish | ||
| Jun 6, 2015 at 16:23 | |||||
| Jun 6, 2015 at 16:22 | vote | accept | Rakholiya Jenish | ||
| Jun 6, 2015 at 16:23 | |||||
| Jun 6, 2015 at 16:21 | comment | added | Stephen Kitt |
You could use ntfsundelete then. I don't know how long it would take foremost to run, since you're specifying the file type it should pretty much run as fast as the disk can be read.
|
|
| Jun 6, 2015 at 16:21 | history | edited | Stephen Kitt | CC BY-SA 3.0 |
Mention `ntfsundelete`.
|
| Jun 6, 2015 at 16:17 | comment | added | Rakholiya Jenish |
NTFS file system. Also how much time do you think it will take to run foremost completely
|
|
| Jun 6, 2015 at 16:15 | comment | added | Stephen Kitt | Why not? Forensics specialists routinely run it on multi-terabyte devices... What filesystem does your external drive use? | |
| Jun 6, 2015 at 16:13 | comment | added | Rakholiya Jenish | Thanks. But running it on a 1TB drive does not seem a good option I think. Would you suggest some other method in this case then? | |
| Jun 6, 2015 at 16:11 | history | answered | Stephen Kitt | CC BY-SA 3.0 |