Are there any recovery tools for the FreeBSD UNIX Operating System?

I am using a freebsd Unix operating system. Someone deleted a bunch of files from the hard drive and I am trying to recover the files. I know when you delete a file from unix, only the pointer or inode is deleted and not the actual file. Are there any tools that recover these deleted files? How do I install them? Thanks.

Are there any recovery tools for the FreeBSD UNIX Operating System?
First I would recommend that you try and restore from your backup of the system. If you do not have one, perhaps now would be a good time to start as you go forward with this system.





If you do not have a backup and still need the files restored there are some forensic tools that you can use. I recommend the sleuth kit, see the link below, installation instructions are available n the site. Optionally you can use the native tools built into the OS, but this requires an advanced degree of competency in a UNIX environment, and even then its not for the faint of heart.





Restoring a file that has been deleted from disk is not something for the faint of heart, although it is not rocket science either.





One possible bonus is that if the files are ASCII (plain text) they are stored in that format on the disk, and can be read raw off the disk using UNIX native tools like grep and sed, in combination with dd. If it is not text you will need to understand the file format it is in.





Another thing to keep in mind is any use of that file-system or disk space that the data was stored on risks overwriting the location where it is still stored.





Also, if the files are larger than the block size of the filesystem the will likely be fragmented and spread across the filesystem, so re-assembly may be needed.





Good luck, there is a reason why people who do this professionally charge large sums of money.
Reply:HAHA, Unix people don't have the need for recovery tools, but seriously there aren't any programs that do that.
Reply:I'm not sure about UNIX file ssytems.


But when you delete a file in Linux it's long gone.





Trey googleing for UNIX recover/undelete tools





Also, you might have some luck with the grep command..check for it.