1 line
1.2 KiB
Plaintext
1 line
1.2 KiB
Plaintext
<!-- SC_OFF --><div class="md"><p>I have an ext4 filesystem. An important directory with its file have been overwritten by a 'more recent' one despite the older file being more up to date, and I am trying to recover the previous version. ext4magic in live system does find an inode corresponding to the directory overwritten (I suppose the filesystem just delinked the inode and relinked it with the new data), however since it has not been deleted in the journal, it refuse to restore it and consider everything fine - but it is not.</p> <p>Is there any other tool that may recover the directory and its file from the directory inode number ? (Since I have it with ext4magic). Is there any other forensic tool that may be of help ?</p> <p>Note : I shutdown quickly after the error and right now I am doing a copy of the block in the live system, so the image is preserved.</p> </div><!-- SC_ON -->   submitted by   <a href="https://www.reddit.com/user/TheSleepyMachine"> /u/TheSleepyMachine </a> <br/> <span><a href="https://www.reddit.com/r/archlinux/comments/qyi1rj/recover_overwritten_directory/">[link]</a></span>   <span><a href="https://www.reddit.com/r/archlinux/comments/qyi1rj/recover_overwritten_directory/">[comments]</a></span> |