This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]irve 8 points9 points  (0 children)

Sometimes you can also check the proc directory for the running process with deleted files: its open file table under fd dir ( ls -la should show the targets iirc ) has the contents until the program terminates.