Quite technical here with limited interest to 99.9% of STW readers, so apologies.
A friend “accidentally” purged the contents of a FreeBSD server that is online but not being used any more. I know where in the filesystem my stuff was (I don’t really care about his) but I’m having trouble getting any info back. I’ve been using the sleuthkit tools but it appears that none of my files are there and that what IS being reported by fls is files that I can read anyway as they’re still on the filesystem.
I have a feeling I’m out of luck on this one but does anyone else have any ideas? Constraints are that I can’t get access to the server (it’s in the US), neither can my friend (he isn’t) and the server is being shut down for good tomorrow.
