• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 316
  • Last Modified:

Deleted Files List

Is there any way by which I can find out the list of files that have been deleted after a certain date or time ?
0
gopubhaskar
Asked:
gopubhaskar
1 Solution
 
yuzhCommented:
Sorry, no way to do it.
0
 
liddlerCommented:
IF they were deleted from the command line by a user AND that user had shell that kept history AND shell history turned on AND the rm commands are still in ~/.sh_history
If this were the case you could go through .sh_history files for all usersand search for rm commands.
Obviosly this is a lot of 'IFs' and 'ANDs', but it might be worth a try...
0
 
jimbbCommented:
Some OSes' filesystems may have debug tools that allow you to see some of this information if you do it soon enough after the file was deleted.

On Linux there's debugfs, for example.  See if there's a similar tool for your filesystem.
0
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
PrintapornCommented:
confirm , No way.
In unix e doesn't have recycle bin.
0
 
suprakomaCommented:
you can't.
0
 
jimbbCommented:
You can, in some circumstances.  See my comment.

It's generally pretty difficult though.
0
 
ellesdCommented:
Are you trying to find things already deleted, or are you trying to implement a method to do this?  If you want to implement such a mechanism, you could write a wrapper script for rm and have it append to a log file the filename, date, time, and user.  You could then check it on a regular basis to audit file removals.  You could also use this method to create a so-called recycle bin by moving the file to predetermined location, and of course createing the log file as well.  Then you could actually undelete the file by moving it back to its original location.  This could use up alot of space and inodes if not monitored and emptied on a regular basis.
0
 
jimbbCommented:
Yikes.  Well I think if that's what you wanted it could have been more clear earlier, so hooray for ellesd picking up on this; I certainly think a grade better than 'C' is deserved....
0
 
gopubhaskarAuthor Commented:
The cocept of grading was new to me !.
Next time I would see to it that the grading se also done properly...
0
 
yuzhCommented:
Please ask CS to change the Grade.

Just poset a 0 point question in:

http://www.experts-exchange.com/Community_Support/

For Grading at EE please see:

http://www.cityofangels.com/Experts/New_Users.htm
http://www.cityofangels.com/Experts/Member_Tips.htm


Cheers!

0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now