Is there any way to check what was recently removed with
Some different solutions
There is no log, but if you want...
Watch for deleted entries and log
You may use
This is a sysadmin approach: All user, all directories and mounted points...
Warning this could be a little overkill read carefully the man page and add some options like
If it is you who accidentally removed files, and your shell supports history, you can list the history back like this:
Of course, you'll need to do an insight search through the history to know where you deleted the file.
If it was another user, maybe his/her
But actually, as other answers propose, there's no log. Just means of scanning the surface for removed files not-yet-overwritten.
By the way, using a Copy-on-write filesystem, such as ZFS or btrfs, you can track deleted files between "states" of the drive in time, called snapshots.
You can have a cron task run with the required time granularity to ensure there is a recent enough snapshot, and then diff between the snapshot and the current state.
There's another way. You can compile your own rm binary, which does save traces of what did it do.
No. Unfortunately, there is no such log. There are, however, several tools to recover deleted files.
No. there is no such log. What is removed simply is removed.
If you have backups then you can compare the files in a backup with the files currently on the computer. That will give you a list of files removed in the time frame between the backup and now.