**Forensics Investigation Team Demonstrates how to Recover Deleted Files using Foremost on Linux **
If you have important files that got deleted, you can digitally recover these files using a program called Foremost on the Linux command-line.
For our project, we, the Forensics Investigation Team (F.I.T.), created a ZIP file that contains a toolkit for recovering lost files. Our ZIP file includes a guide to using Foremost and a virtual disk image. You can find the link to our ZIP file at the end of this README.md.
When you extract our ZIP file, you will find a guide with the filename, "How to Recover Deleted Files.". We made our guide, in the form of an infographic, which contains step-by-step instructions on how to use Foremost to recover a deleted image. In the ZIP file you will also find a virtual disk image with the filename, "forensics-investigators-kali-linux.ova". Please download this virtual disk image onto your computer to access it in your Oracle VM VirtualBox Manager. You may need to install an Oracle VM VirtualBox Manager before attempting to open this virtual machine.
Feel free to use the virtual machine we created to practice your deletion-and-recovery skills. For more information on our team's mini deletion-and-recovery exercise, please click on the README.txt icon that we installed onto the hard drive of forensics-investigators-kali-linux.ova. Follow the instructions in the README.txt to begin our deletion-and-recovery exercise. We recommend using the infographic guide alongside the exercise in this vitural machine. Good luck!
Download our ZIP file here and start recovering files: https://drive.google.com/file/d/1JHITsS6o6JcdvT_DgZ5zRRW7BZ9KLUJd/view?usp=sharing