cgsecurity.org

So as I said before, the JPG+TIF joint recovery failed the CR2 files, but it turns out that scanning the disk exclusively for TIF files recovered most of them. :) Then I was able to extract EXIF data to rename them.

I did not dive deep into the code, but I guess it might have something to do with ...

That's what I understood.

I could not find anything useful in the log file yet, but I'll check it more regularly.

The $MFTMirr was not corrupted, but unfortunately it lacked maybe half of the file records, because the allocated 4 sectors were not sufficient to hold the whole list. As to the original $MFT, it was indeed ...

So I found what very much seems to be the boot sector backup at the end of a smaller adjacent partition. This in turn helped me to locate what seems to be the MFT mirror file in the main partition, or at least part of it. I'm still in the process of learning how it's encoded. Not sure why the ...

Thank you for your answer. The 17 large TIF (non)files were actually recovered after a PhotoRec run with the options you suggested. I guess this confirms that the ~10Mo files were actually fragmented.

I'm in the process of understanding NTFS and EXT4 layouts. My hope is that even though ~20 ...

Hi,

I accidentally deleted a NTFS filesystem with mkfs -t ext4. That's bad.
Testdisk could not rebuild the boot sector nor the MFT. These parts (and their backups) seem to have been overwritten when creating the EXT4 filesystem.

I'm trying to recover raw camera files (CR2) sizing approximately ...