Is it safe to use this skill on a live drive?

For forensic integrity, it is always recommended to use a hardware write-blocker or perform the recovery on a bit-stream disk image (like a .dd file) rather than a live device.

Can I target specific file types like PDFs or JPGs?

Yes, this skill provides command-line configurations to disable all file types and only enable specific signatures, which speeds up the recovery process.

Does PhotoRec require a working file system to recover files?

No, PhotoRec uses signature-based carving to recover data directly from raw sectors, allowing it to work even if the file system is heavily damaged or formatted.

Will original file names and directory structures be preserved?

Generally no. Because carving ignores file system metadata, files are recovered with generic names. This skill includes scripts to help organize and rename them by type and content.

Recover Deleted Files with PhotoRec

Name: Recover Deleted Files with PhotoRec
Author: mukul975

bymukul975

•

4,121

•

安全与测试

Recovers lost or deleted files from forensic disk images and damaged storage media using signature-based file carving.

This skill provides specialized guidance for using PhotoRec to perform digital forensic file recovery within AI-assisted workflows. It enables Claude to guide users through carving files from raw disk sectors even when file system metadata is missing, corrupted, or overwritten. The skill covers the entire forensic lifecycle including environment preparation, targeted recovery of specific file types (documents, images, databases), and post-recovery organization, hashing, and integrity validation to maintain a proper chain of custody.

主要功能

01Post-recovery file organization and cataloging scripts

02Targeted recovery workflows for specific extensions (PDF, JPG, SQLITE)

034,121 GitHub stars

04Forensic recovery from raw disk images and storage devices

05Signature-based file carving for 300+ file formats

06Integrity validation using SHA-256 hashing and signature matching

使用场景

01Data recovery from formatted or corrupted partitions where the file system is unreadable

02Recovering deleted evidence from a suspect's USB drive during a digital investigation

03Extracting specific media fragments from surveillance camera memory cards

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills recovering-deleted-files-with-photorec

For use in Claude.ai and ChatGPT

主要功能

01Post-recovery file organization and cataloging scripts

02Targeted recovery workflows for specific extensions (PDF, JPG, SQLITE)

034,121 GitHub stars

04Forensic recovery from raw disk images and storage devices

05Signature-based file carving for 300+ file formats

06Integrity validation using SHA-256 hashing and signature matching

使用场景

01Data recovery from formatted or corrupted partitions where the file system is unreadable

02Recovering deleted evidence from a suspect's USB drive during a digital investigation

03Extracting specific media fragments from surveillance camera memory cards

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills recovering-deleted-files-with-photorec

For use in Claude.ai and ChatGPT