Create rm-rf_star.md

2017-12-05 14:50:17 +01:00 · 2017-12-05 14:50:17 +01:00 · 7c008c914d
commit 7c008c914d
parent c6fda6d0c5
1 changed files with 26 additions and 0 deletions
--- a/rm-rf_star.md
+++ b/rm-rf_star.md
@ -0,0 +1,26 @@
+when you write rm -rf * on your home!!!
+----------------------------------------
+
+
+1: Dump jour journal of your ext4 hdd (before stop computer)
+```
+debugfs -R "dump <8> /PATH/journal.copy" /dev/DEVICE 
+```
+
+2: Umount your partition
+
+3: Get the timestamp of the last time you want data history
+```
+date -d "-3day" +%s
+```
+
+4: Create a new directory to store data
+```
+mkdir your_folder
+```
+
+5: Extract data:
+```
+ext4magic /dev/nvme0n1p5 -j /tmp/JOURNAL.copy -a `date -d "-3day" +%s` -M -d your_folder/
+```
+