This means that until that space is taken up by another file, the original file is still there and can be retrieved using specialised data recovery tools. Instead, the file system merely marks the file as deleted and assigns the space the file occupied as available for use. When you delete a file, it isn’t immediately zapped into oblivion. $ sudo dnf install testdiskīefore you start using PhotoRec, it’s important to understand how a filesystem handles deleted files. If you are using a Fedora or other RPM based distro, use dnf instead. This is why PhotoRec can work with FAT, NTFS, ext3, ext4 and other partition types. Instead, it focuses on the unique signatures left by the different file types to identify them. Although initially designed to only recover image files (hence the name), PhotoRec can be used to recover just about any manner of file.Įven better, PhotoRec works by ignoring the underlying filesystem on the specified partition, disk or USB drive. But if all you’re interested in is recovering deleted files from a partition, hard disk or even a USB drive, you can use PhotoRec. Whether this is on account of you overwriting or deleting a partition, or a partition becoming unreadable for any reason, Testdisk can help you restore the partition, or at the very least, recover data from it. Testdisk is best suited for recovering lost partitions. You can use either of these tools to recover files, but each has a job that it’s best suited for.

Developed by CGSecurity and released under the GPL, PhotoRec is distributed as a companion utility of Testdisk, which can be used to recover and restore partitions.

Testdisk recover files ext4