I have been running fls (from the Sleuth Kit) since last night, in verbose mode, hoping it will identify the files and directories I just deleted before running the program.
sudo fls -f ntfs -d -r -v -p /dev/sda3 > ~/Desktop/deleted_files.txt
For the same reason, I don't dare to write data to the partition since. I wonder if someone knows how long it would take for fls to run on an NTFS partition of 110 GB (96% used)? Or just your experience is okay. Thanks!
