I am working on a case with following information:

RAID 5, 4TB * 5 Drives
RAID Controller: PERC H710 mini
OS: Win 2012
FS: NTFS

I have 100% image of 4 Drives, 1 Drive missing.
What is the default value of Block, parity etc. for the Controller?

_________________
__________
There is no substitute for education and experience
THANK YOU
SHAHI
shahi.mahbub@gmail.com

I do not recall something specific about this controller and do not remember the any parameters therefore, but if you're searching this way, you may also want to check the same for LSI 2208. If I recall correctly, that's the controller H710 is based upon.

Should you need an assistance with this RAID, I can connect and help recovering the data remotely. Please check your PM.

_________________
• Remote RAID, NAS, SAN, VMware, DVR (CCTV), flash and tape recovery. Data recovery support.

Default Dell settings is 64Kb stripe, backward dynamic. Offset from 0

_________________
Angel Data Recovery

RAID 5 does not fail with only 1 bad drive. Are you sure that the 1 drive you did not mirror is not the last one to go offline?

_________________
Luke
Recovery Force Data Recovery

I agree. Op will need to identify if any members are stale, without this the array can be constructed correct but data will still be bad...

Thanks to all for prompt reply.

1st HDD failed a day, and the system was working, before replacing with another drive in next 2 days, user was not having access to data, user was having folder, but folder was showing empty, user thought another failure according to their generated log.

Then the user replaced the 1st failed drive with another spare drive. Then they tried to reconstruct, failed. They tried some recovery software, they got Folder Tree, but Data corrupt.

Then brought to me. as a first step, I did image 4 drives, all 4 drives with 100% image. and still the 1st failed drive is missing, and I didn't try on the drive. According to my knowledge, it's possible to recover from 4 Drives/Images. But also, I told the user to bring also the 1st failed drive.

I didn't start the recovery part yet.

_________________
__________
There is no substitute for education and experience
THANK YOU
SHAHI
shahi.mahbub@gmail.com

You can Reconstruct those images with WinHex and scan it with r-studio if needed...

_________________
Phoenix Computer Forensic Laboratory
http://www.databack.ir

@DR-Kiev, it's HP710, not Dell. Is those using same?

Drive Order - 1, 2, 3, 4(Missing-1st failure), 5 (2nd failure, but has full image)
I found a NTFS volume, but BLANK - This is the scene actually they tried to RECreate instead of RECONSTRUCT!!!

_________________
__________
There is no substitute for education and experience
THANK YOU
SHAHI
shahi.mahbub@gmail.com

The RAID controller you've mentioned initially is a Poweredge.
If you're still unsure about the RAID parameters, there's a basic way to check at least stripe size: if I recall correctly, for some controllers Dell restricts stripe size to the single value of 64 KB. If you have the hardware as well, not just the drives, check that.

_________________
• Remote RAID, NAS, SAN, VMware, DVR (CCTV), flash and tape recovery. Data recovery support.

You wrote:


This is Dell
http://www.flagshiptech.com/eBay/Dell/p ... sGuide.pdf

_________________
Angel Data Recovery

You are right. My mistake!

_________________
__________
There is no substitute for education and experience
THANK YOU
SHAHI
shahi.mahbub@gmail.com