trch-file-recoverer 0.2.0

No project description provided

File Recoverer

This is a tool you can use to recover files from partition images. It is a very simple tool, but it can be useful in some cases where you need to recover files from a partition image.

Pre-requisites

You must install The Sleuth Kit (TSK) to use this tool. To install it on Ubuntu, run the following command:

sudo apt-get install sleuthkit

To install on other Linux distributions, please refer to the TSK website. To install on a Mac, you can use Homebrew:

brew install sleuthkit

Installation

To install this tool, you can use the following command:

pip install trch-file-recoverer

Usage

To use this tool, you must first create a partition image. You can do this using the dd command. For example, to create an image of the first partition on a disk, you can run the following command:

dd if=/dev/sda1 of=sda1.img

Once you have created the image, you can run the tool as follows:

recover-files sda1.img