At a lower level

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
KDMcMullan
Posts: 11
Joined: 18 Oct 2016, 20:06

At a lower level

#1 Post by KDMcMullan »

I've used testdisk a number of times, normally to repair partition records from backups. I'm working with a drive at present for which testdisk cannot seem to recover a partition.

My understanding is that a partition table normally tells the OS where to find files. I've recently discovered that photorec CAN find files on the drive. My best guess at how it does this is by scanning the drive for patterns which match the "signatures" of certain given file types. (First question: is this assumption accurate?)

Now, I'd further understood that files can be fragmented (split across non-contiguous parts of the drive). I had understood that the FAT contained a "linked list" of where the file fragments were located. (I'm no longer sure if this is accurate, nor do I understand how this differs from NTFS.) The big question, though, is: how can photorec find complete files which had been fragmented?

I realise that you are busy and this is a complicated question. I'm just curious!

Locked