Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
December 11th, 2009, 7:56
I wonder how professional companies and forensic experts recover data ? Besides so many softwares , analysing MFTS and recovering data manually must be only option for maximum efficiency.
If a folder xyz is deleted from ntfs partition and another folder of same name but differnet files is added , can mft analysis trace original folder? ( Of course if it is not overwritten) Can someone guide me the how to begin.I am willing to put effoorts , need little help. grateful to all
December 11th, 2009, 11:26
for Million $ I can help
December 11th, 2009, 12:38
I'll do it for 1/2 price! $500,000.00 is good enough!
December 11th, 2009, 13:28
If I was doing it, I would forget the folder and look for the MFT file records for the old files.
December 11th, 2009, 22:23
Even if the original MFT record was overwritten, you can search for the right Data Runs of the delete MFT Record on the LogFile.
Good Luck !
Powered by phpBB © phpBB Group.