# Recover only deleted files with sorter

**URL:** <https://sleuthkit.discourse.group/t/recover-only-deleted-files-with-sorter/1897>\
**Category:** The Sleuth Kit Help\
**Created:** [June 3, 2020, 5:16pm UTC](https://sleuthkit.discourse.group/t/recover-only-deleted-files-with-sorter/1897 "2020-06-03T17:16:09Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![mpilkington](https://avatars.discourse-cdn.com/v4/letter/m/8edcca/32.png) [@mpilkington](https://sleuthkit.discourse.group/u/mpilkington)\
**Post date:** [June 3, 2020, 5:16pm UTC](https://sleuthkit.discourse.group/t/recover-only-deleted-files-with-sorter/1897/1 "2020-06-03T17:16:09Z")

</div>

I would like to use sorter with a config to recover only deleted Windows PE files. It seems straightforward to use a config file to save only executables, but it will be all executables–allocated & unallocated. I don’t see an option to get only the deleted files. Is there an option to do that?

Thanks!