Linux file recovery

R-Studio recovery method

1. Load disk image in arsenal image mounter (AIM)

Arsenal_image_mounter.jpg

2. Right-click on the root partition and choose show files

R-studio.jpg

Tools

• R-studio Recovery
• Arsenal Image Mounter

Resources

• https://www.osdfcon.org/presentations/2019/Ali-Hadi_Performing-Linux-Forensic-Analysis-and-Why-You-Should-Care.pdf