python-sleuthkit-recover

Linux command line thumbstick file recovery script using SleuthKit

Features

1. Recover accidentaly deleted files from your thumbstick
2. Choose which files to recover

What won't work

1. Recover files from unallocated [or] deleted partitions

To Run this file,

1. Make sure SleuthKit and Python 3.x is installed
2. Clone/Download this repo
3. Run the recover.py script

     python3 recover.py

4. Select the partition with the deleted file using the corresponding number
5. Give a name for the temporary image of the partiton that will be created. This file will be as large as the partition. THIS PROCESS WILL TAKE TIME. DON'T PANIC!
6. Select the file to recover using the corresponding number

Versions

• 0.0a1.dev1
  • Initial Commit
• 0.1a1.dev1
  • Added NTFS support

Contact Me: Telegram