cloudcalvin
5/5/2015 - 10:43 AM

File Recovery Commands

File Recovery Commands

#After pdfs and docs have been carved from filsystem, the folowing commands can be used to search for specific documents ##Search for PDF containing specific text: find . -name '.pdf' -exec sh -c 'pdftotext -q "{}" - | grep --with-filename --label="{}" --color "Search Query"' ; ##Search for .doc or .DOC files containing specific text: find -name '.doc' | while read -r file; do
catdoc "$file" | grep -H --label="$file" "Search Query" done