extundelete
Recover deleted files from ext3 or ext4 partitions by parsing the journal.
See also date for Unix time information and umount for unmounting partitions.
More information: https://extundelete.sourceforge.net.
- Restore all deleted files inside partition N on device X:
sudo extundelete /dev/sdXN --restore-all
- Restore a file from a path relative to root (Do not start the path with
/):
extundelete /dev/sdXN --restore-file path/to/file
- Restore a directory from a path relative to root (Do not start the path with
/):
extundelete /dev/sdXN --restore-directory path/to/directory
- Restore all files deleted after January 1st, 2020 (in Unix time):
extundelete /dev/sdXN --restore-all --after 1577840400