I wonder how professional companies and forensic experts recover data ? Besides so many softwares , analysing MFTS and recovering data manually must be only option for maximum efficiency.
If a folder xyz is deleted from ntfs partition and another folder of same name but differnet files is added , can mft analysis trace original folder? ( Of course if it is not overwritten) Can someone guide me the how to begin.I am willing to put effoorts , need little help. grateful to all

for Million $ I can help

_________________
All went well until I plugged the drive in.

I'll do it for 1/2 price! $500,000.00 is good enough!

_________________
www.datarecoveryne.com

If I was doing it, I would forget the folder and look for the MFT file records for the old files.

Even if the original MFT record was overwritten, you can search for the right Data Runs of the delete MFT Record on the LogFile.

Good Luck !