Unix and Linux Discussions Tagged with recover |
|
Thread / Thread Starter |
Last Post |
Replies |
Views |
Forum |
|
|
|
8 |
9,653 |
Shell Programming and Scripting |
|
|
|
6 |
15,710 |
Ubuntu |
|
|
|
6 |
6,071 |
Shell Programming and Scripting |
|
|
|
2 |
3,363 |
UNIX for Beginners Questions & Answers |
|
|
|
8 |
6,660 |
What is on Your Mind? |
|
|
|
9 |
13,157 |
Linux |
|
|
|
2 |
16,374 |
Fedora |
|
|
|
8 |
23,348 |
Red Hat |
|
|
|
2 |
5,927 |
Filesystems, Disks and Memory |
|
|
|
3 |
12,793 |
HP-UX |
|
|
|
2 |
2,608 |
UNIX for Dummies Questions & Answers |
|
|
|
1 |
10,567 |
Shell Programming and Scripting |
|
|
|
7 |
22,210 |
Filesystems, Disks and Memory |
|
|
|
1 |
3,659 |
Linux |
|
|
|
5 |
40,911 |
UNIX for Advanced & Expert Users |
|
|
|
5 |
33,578 |
UNIX for Dummies Questions & Answers |
|
|
|
3 |
3,561 |
AIX |
|
|
|
3 |
2,067 |
Solaris |
|
|
|
1 |
2,250 |
UNIX for Dummies Questions & Answers |
|
|
|
1 |
4,526 |
UNIX for Advanced & Expert Users |
|
|
|
1 |
2,486 |
UNIX for Dummies Questions & Answers |
|
|
|
5 |
6,094 |
HP-UX |
|
|
|
5 |
16,919 |
Cybersecurity |
|
|
|
4 |
3,211 |
UNIX for Dummies Questions & Answers |
|
|
|
3 |
6,218 |
Cybersecurity |
|
|
|
2 |
3,857 |
UNIX for Dummies Questions & Answers |
|
|
|
4 |
3,222 |
UNIX for Dummies Questions & Answers |
|
|
|
3 |
3,163 |
UNIX for Advanced & Expert Users |
|
|
|
4 |
31,108 |
UNIX for Advanced & Expert Users |
|
|
|
3 |
3,953 |
Programming |
|
|
|
8 |
9,103 |
UNIX for Advanced & Expert Users |
|
|
|
1 |
4,931 |
UNIX for Dummies Questions & Answers |
|
|
|
3 |
78,938 |
UNIX for Dummies Questions & Answers |
|
|
|
1 |
10,487 |
UNIX for Dummies Questions & Answers |
TSK_RECOVER(1) General Commands Manual TSK_RECOVER(1)
NAME
tsk_recover - Export files from an image into a local directory
SYNOPSIS
tsk_recover [-vVae] [-i imgtype ] [-b dev_sector_size ] [-o sector_offset ] [-d dir_inum ] image output_dir
DESCRIPTION
tsk_recover recover files to the output_dir from the image. By default recovers only unallocated files. With flags, it will export all
files.
The arguments are as follows:
-v verbose output to stderr
-V Print version
-a Recover allocated files only
-e Recover all files (allocated and unallocated)
-i imgtype
The format of the image file (use '-i list' for supported types) If not given, autodetection methods are used.
-b dev_sector_size
The size (in bytes) of the device sectors If not given, autodetection methods are used.
-o sector_offset
Sector offset for a volume to recover (recovers only that volume) If not given, will attempt to recover all volumes in image and
save them to different folders.
-d dir_inum
Directory inum to recover from (must also specify a specific partition using -o or there must not be a volume system)
EXAMPLES
To recover only unallocated files from image.dd to the recovered directory:
# tsk_recover ./recovered ./image.dd
AUTHOR
Brian Carrier <carrier at sleuthkit dot org>
Send documentation updates to <doc-updates at sleuthkit dot org>
TSK_RECOVER(1)