Re: [sleuthkit-users] Who can undelete some files on my Linux server ?

[Brian C. <ca...@sl...>]

On Monday, November 17, 2003, at 06:26  PM, Steven Depuydt - 
LogiSoft.be wrote:

> Hi,
>
> I have deleted 2 MySQL databases on my Linux server (RedHat 7)
> I don't have a recent backup.
>
> I have tried the 'Sleuth Kit', but I can't figure out HOW it his 
> working.

Have you tried to use Autopsy as well?  Autopsy makes the process much 
easier.

     http://www.sleuthkit.org/autopsy

> Who can un-delete my databases for me ?

If you can get Autopsy running and import the image, then you can 
browse to the original location and try and export it.  You maybe lucky 
because you have Red Hat 7 and the block pointers of the deleted file 
may not have been cleared.  Your best bet is to stop using this machine 
and move the disks to another system so that you don't overwrite the 
data you want to recover.

good luck.

brian