Switch to full style
Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
Post a reply

Million $ question, for data recovery enthusist and new bees

December 11th, 2009, 7:56

I wonder how professional companies and forensic experts recover data ? Besides so many softwares , analysing MFTS and recovering data manually must be only option for maximum efficiency.
If a folder xyz is deleted from ntfs partition and another folder of same name but differnet files is added , can mft analysis trace original folder? ( Of course if it is not overwritten) Can someone guide me the how to begin.I am willing to put effoorts , need little help. grateful to all

Re: Million $ question, for data recovery enthusist and new bees

December 11th, 2009, 11:26

for Million $ I can help :)

Re: Million $ question, for data recovery enthusist and new bees

December 11th, 2009, 12:38

I'll do it for 1/2 price! $500,000.00 is good enough!

Re: Million $ question, for data recovery enthusist and new bees

December 11th, 2009, 13:28

If I was doing it, I would forget the folder and look for the MFT file records for the old files.

Re: Million $ question, for data recovery enthusist and new bees

December 11th, 2009, 22:23

Even if the original MFT record was overwritten, you can search for the right Data Runs of the delete MFT Record on the LogFile.

Good Luck !
Post a reply