FDRecovery is an open-sourced forensic tool developed by the SnP lab. The tool can be used to restore the files deleted by users accidentally. The core idea is to perform forensic analysis over the file system metadata and the journals. Compared to other free forensic data recovery tools for Linux (e.g., TestDisk, PhotoRec, Foremost), FDRecovery can provide to the user a candidate list of the potential files to be recovered, and can store the specific file selected by user. In addition, the recovery process is much more efficient. A more detailed comparion can be found here.
Version: 0.99
Language: Python
License: GNU GPL v3.
OS: Linux (EXT4, EXT3, EXT2), Windows (NTFS, FAT)
Archive (09/07/2022) Github repository