In this article, we are telling you about How to Recover Deleted Files From Pendrive, you must have searched about Recover Deleted Files From Pendrive but you must have found software’s, here we are telling you everything.
Most people search about How to Recover Deleted Files From Pendrive only when we have to recover deleted files or we do USB Forensics, here we are telling you about USB Forensics
Recover Deleted Files From Pendrive We are telling you about two tools here and what happens that we are able to recover and when we are not able to Recover Deleted Files From Pendrive, you are also being told here.
Note – This article is only for educational purpose. Don’t miss use your knowledge and skills.
Background Process of Recover Deleted Files From Pendrive ?
Let us first know about Background Process of Recover Deleted Files From Pendrive, by the way, if seen, you do not need to know much about Background Process of Recover Deleted Files From Pendrive.
Because whatever software’s you use, it automatically recovers the deleted files, but if you know about the background process, then it is good for you, so you are being told here.
First of all, we want to tell you that when you keep any data in any storage device, it is saved in sectors like suppose your pen drive is of 1 GB, in such a situation, for example, you understand that there are 1000 sectors. Whatever your data is, it is saved in 1000 sectors.
For example, suppose a pdf file is saved in your own pendrive, the sectors in which it is saved will be that, in such a situation, all the other sectors remain free, whenever you recover that file by deleting it, then that file would be able to recover. Because in whichever sector your pdf file was there, no other file has been written in that sector after it is deleted.
In such a situation, if any other file is written in the same sector, in such a situation it is not able to recover easily, but still it recovers to some extent. In such a situation, the file that we get after recovering becomes corrupt.
Recover Deleted Files From Pendrive In Kali Linux ?
First of all, we are telling you about Recover Deleted Files From Pendrive In Kali Linux, we are telling you in both Windows and Kali Linux, although you get many types of tools and software’s.
But if you have more resources to do the same work, it is better for you, then you must also know about the tools mentioned here because both these tools are used in USB Forensics.
Here we are telling you about the tool, its name is foremost, first of all you have to install this tool, you can install this tool by giving (apt install foremost) command, after that you can use it.
As you can see here we have some data in a pen drive, we are first deleting it, as well as we will also delete this data from trash, after that we will recover the deleted files.
After deleting all the files, you can recover deleted files using the foremost as we have told you, you get many tools for Recover Deleted Files From Pendrive, this is one of them.
After doing all this, you can see the path of your pen drive by giving this command as you can see in the image, here in our case the path may be different and in your case the path of your pen drive may be different.
After this, you have to give a command in such a way as you can see in the image, here if your command does not run properly in this way, then you can run this command by putting sudo ahead.
As soon as you run this command, after that you will be able to see that your deleted files will be recovered as you can see in the image, something like this will show in front of you here you will have to wait a bit in recover.
After doing all this, you will be able to see that you will get all the recovered files in a folder in a folder like this, here all types of files will be shown to you by becoming a separate folder.
As you can see in the image, these are the same images which we deleted and later using foremost we have recovered the deleted files, in this way you can recover deleted files from pendrive in Kali Linux.
Recover Deleted Files From Pendrive In Windows ?
Similarly, you also get many types of software’s for windows which are used in forensics like we have told you earlier about What Is Maltego And How To Use Maltego and Autopsy, if you have not read those articles, then you can read them too.
Here in Recover Deleted Files From Pendrive In Windows, we are telling you about ProDiscover basic which is also used in forensics, this software’s helps you a lot in forensics, first you have to download and install it like we do. Normally, installing any software, it has to be done like this.
After running this software, something like this opens in front of you, you have to give project number, project file name and description, here you can fill anything according to you, after that you have to click on open.
After doing all this, you have to capture the image as you can see in the image, here in our case we have used 32 GB of Pen Drive, in your case here you will show your Pen Drive which you are using.
Here in this way you have to fill all the information here as you can see in the image, here we want to tell you that the size of your Pen Drive is as much space as you need.
Like here in our case 32 GB Pen Drive is being shown, in such a way we need 32 GB in the destination path too, here in this way you have to click on ok after filling all the information.
After this you will be able to see that this software will start capturing the image as you can see in the image, it depends on the size of your Pen Drive, it takes the same amount of time to capture the image.
After doing all this, you have to select the image, in this way the captured image is shown to you in eve format, which you can use anytime in USB forensics or in Recover Deleted Files From Pendrive.
After doing all this, all the deleted files are shown in the content view, here whatever file you want to recover, you can do it by right-clicking and copying as you can see in the image.
As you can see in the image, here this software has given us by recovering the files of a month ago, you also get the pro version of this software, the software’s used in forensics are very useful for you in Chfi Archives – Free Learning Tech.
We hope that you must have come to know about How to Recover Deleted Files From Pendrive, we have told you here How to Recover Deleted Files From Pendrive in both Linux and Windows.
There are many other types of tools and software’s that are used in forensics, about which you will be told further if you have any kind of question about How to Recover Deleted Files From Pendrive, so you can ask in the comment.
We have already given you some articles on computer forensics, which you can read, here we have given you deep information about all the modules of Ceh Archives –, you can also read them.
Sharing is Caring
Subscribe to our blog for latest updates.