Reading deleted files from NTFS

After I RO
Code:
# mount -t ntfs ...
How can I via /usr/bin/find, list recently deleted files (deleted via shift+del under windows, so those aren't in Recycle Bin)
 
As far as I know, you can't do it via find(1)(). If you want to recover your files, you may try your luck with sysutils/testdisk. testdisk is a powerful and easy to use data recovering tool. Here is a step by step tutorial. Please don't write anything on that partition.
 
The point is, I want to do it from/within FreeBSD. (Under Win, I use Restoration 3.2.13)
I'll use sysutils/testdisk, as it supports NTFS partitions since version 6.11

Worry not, as:
Code:
# mount -t ntfs ...
Doesn't allow any kind of write.

Thx for advices crew! ;)

PS: I haven't lost any files, just want to learn something new.
 
Put the drive in a housing, dd an image of the drive to an iso, then run a program that lets you recover from the ISO, like UFS Explorer(supports NTFS too). That's how I recovered my accidentally deleted files from FreeBSD 3 years ago. :)
 
Back
Top