Welcome TurkHackTeam Members.
In This Tutorial, I Shall Show You How To Recover Your Deleted Data.
Subject Contect
➤ How to Recover Deleted Data on Windows?
➤ How to Recover Deleted Data on GNU/Linux?
➤ How to Recover Deleted Data on Android?
➤ How to Recover Deleted Data on External Disks?
How to Recover Deleted Data on Windows?
Another important criterion in forensics is the process of recovering deleted data. We can easily recover deleted data on devices with Windows operating system. There are many data recovery tools on the web, I will show you how to recover your data with two tools named Recuva and EaseUS. First let me show you how to recover deleted data with Recuva tool and then with EaseUS tool.
Before proceeding with the deleted data recovery process, we must have a deleted file first. I created a folder named THT_XCode on the desktop and added 3 files named tht as png, pdf and txt to this folder.
Let's delete this folder now. We will perform the recovery process through this folder.
If you're ready, let us begin.
Recovering Deleted Data with Recuva Tool
» First of all, we go to[FONTArial]this website where we will download the Recuva tool. And we press the Download Now button. Our program will start to download directly.
» After our tool is downloaded, we do the installation process. After successfully completing the installation, we open our tool and we see a screen like this. Here, from the Hard Disk Drivers section, we choose whichever discs connected to our computer we want to perform data recovery. You can also perform this data recovery process for an external disk (Flash Memory, SD Card etc.) from External Devices. If we want to operate for a specific directory rather than a complete disk, we need to select which part we want to process in the Select Iocation section. Since the folder we just deleted is on the desktop, I choose the Desktop section. After making our selection, we click the Start button below. And the scanning process begins.
» The scanning process might take some time. We are waiting for the transaction to finish. When the process is finished, we select the file we want to recover and click the Recover button below.
» And thus, we recover the deleted data.
Recovering Deleted Data with Recuva Tool
» First of all, we go to its official website and download the tool.
» Then we open our tool and select the disk or directory to be scanned. Since the file was on the desktop before it is deleted, I go to the Desktop option and click the Scan button. And the scanning process begins.
» The scanning process may also take a little long, we wait patiently. When the scan is finished, we select the file we want to restore and click the Recover button below.
» And thus, we recover the deleted data.[/FONT]
How to Recover Deleted Data on GNU/Linux?
We will use a tool called Testdisk to recover deleted data on GNU/Linux operating systems..
Let's begin if you're ready.
Recovering Deleted Data with TestDisk Tool
» First, we open our terminal and install the Testdisk tool by entering the command I gave below.
Kod:
apt-get install testdisk
» After the installation of the tool is completed, we run the tool by typing the following command.
Kod:
testdisk
» This tool works a little differently than other GNU/Linux tools. The screen we see is the open version of our tool. Now we come to Create option and press enter.
» Then it asks us for which disk we will do the data recovery process. From here, you need to point to the directory you want to process and press enter.
» Here, it asks us which section it'll work on, howevee the tool automatically finds it and gives us the section below. We click on the part he told us and enter.
» Now we come to the second option, click Advanced, and press enter.
» And it asks for which directory we will operate. We hover over our directory and click the left button to go to the Undelete option from below. We press the enter button again. And the scanning process begins.
» After the scanning process is completed, we come across previously deleted files. From here, we point to the file we want to recover and press the c key, which performs the copy task. You can also use the a key to select all files.
» Here it asks us where to paste the copied file. I choose the desktop, then I press enter.
» And as you can see, the file I choose is copied to the desktop. In this way, we recovered the deleted data.
How to Recover Deleted Data on Android?
There are also many tools for recovering deleted data on an Android device. I will use the DiskDigger tool.
Before proceeding with the deleted data recovery process, we must have a deleted file first. I added a file named tht with png extension to any folder.
Let's delete this file now. We will perform the recovery process through this file.
If you're ready, let's begin.
Recovering Deleted Data with DiskDigger Tool
» You can download the DiskDigger tool on its official website and use it on your computer. You can also download it directly from the Play Store and use it on your phone. I will explain the tool to you on the phone. So, we download the DiskDigger program from the Play Store.
» We open our application and a screen like this welcomes us. No need to be root on your device for simple scans. However, if you want to perform an advanced scan, your device must be rooted. I'll do a simple scan. In this, I click the Start Basic Photo Scan button.
» As you can see it found our deleted file. We select the file we want to recover and click the Recovery button below. And thus, we recover our deleted file.
How to Recover Deleted Data on External Disks?
You can use EaseUS, DiskDigger, Recuva tools and similar tools to recover deleted data from disks such as memory card. However, I will show you the 7-Data Recovery Suite tool so that I can show you another new tool.
Before proceeding with the deleted data recovery process, we must have a deleted file first. I added a file named tht with pdf extension to the flash memory.
Let's delete this file now. We will perform the recovery process through this file.
If you're ready, let's begin..
7-Recovering Deleted Data with Data Recovery Suite Tool
» First of all, we go to the tool's own site here and we click the Free Download button. Our tool start to download. When the download is complete, we install our tool.
» After the installation of our vehicle is completed successfully, we open our vehicle. And from here we click the Fully Recover button.
» After the installation of the tool is completed successfully, we open the tool. And here we click on the Recover Completely button.
» And the scanning process begins. We wait patiently until the scanning process is over.
» When the scanning process is completed, we see a screen like this. If you divided the disk we scanned into sections here, different sections will come out. Select which section you want to recover. If you did not partition the disk ,like me, there will be only one partition. We select the section and click the Next button.
» We see a screen like this. Finding the target file is quite difficult. So, we will find our deleted file by searching. Sometimes the name of the file is corrupted. Therefore, I will search with the extension of the file. I suggest you search for the name of the file first, if you cannot find it, search by the extension of the file.
» I found my file in the search result. As you can see, there was a slight change in his name. Now I select the file and click the Save button from the bottom right.
» I choose the Iocation to save on and my file is saved on the desktop. Of course, while saving, it is saved not only with the file but with the folders where the file is located. When I open the folder, I can access my file. And thus, we recovered the deleted data.
Thank you for reading
Take Care...
Sincerely:Smiley1021:
(I present my congratulations to X-Code, for his success in the contest)
Translated From: https://www.turkhackteam.org/adli-bi...i-anlatim.html
Author: @X-Code
Translator: @Dolyetyus