Tsk recover

From SleuthKitWiki
Revision as of 19:27, 27 October 2010 by Carrier (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Back to Help Documents

tsk_recover will extract the unallocated (or allocated) files from an image and save them to a local directory. This is useful if you deleted a bunch of files and want to recover them to a folder.