How to recover deleted files?

Recovering deleted files can be challenging, especially if they were removed using commands like rm. Here are some methods you can try to recover deleted files:

1. Check Backups:

• If you have a backup system in place (like rsync, tar, or cloud backups), restore the deleted files from your most recent backup.

2. File Recovery Tools:

• Use specialized file recovery tools that can scan your disk for deleted files. Some popular options include:
  • TestDisk: A powerful tool for recovering lost partitions and making non-booting disks bootable again.
  • PhotoRec: A companion tool to TestDisk that focuses on recovering lost files, including documents and media.
  • Extundelete: Specifically for ext3/ext4 filesystems, it can recover deleted files from these types of partitions.

Example of using PhotoRec:

sudo photorec

3. Check the Trash/Recycle Bin:

• If you deleted files using a graphical interface, check the Trash (Linux) or Recycle Bin (Windows) to see if the files are there.

4. Using extundelete (for ext3/ext4 filesystems):

• If you are using an ext3 or ext4 filesystem, you can use extundelete to recover deleted files:

sudo extundelete /dev/sdX --restore-file path/to/deleted/file

Replace /dev/sdX with your actual device identifier.

5. Professional Data Recovery Services:

• If the data is critical and other methods fail, consider contacting a professional data recovery service. They have specialized tools and expertise but can be costly.

Important Notes:

• Stop Using the Disk: If you realize that you need to recover deleted files, stop using the disk immediately to prevent overwriting the deleted data.
• Recovery Success: The success of recovery depends on various factors, including how much the disk has been used since the deletion and the type of filesystem.

If you need more specific instructions or have questions about a particular recovery tool, feel free to ask!