a few question after successfully recovered my JPG
Posted: 08 Nov 2013, 11:03
so basically i were going to re-install one of my office computer and i accidentally pick a wrong hard disk that supposed to store some important office data
i just realize it after installed the OS, split the hard drive into two partition (it used to be just one partition) and install a few software within it.
it took all days for me to read the instruction about photorec and gratefully i could recovered 95% of JPEG and docx file with just a few error.
and thanks to this incident, i became kinda interesting about digital forensic and data recovery. and i got some question after i've done my recovering
1. is that possible to make an image.dd from accidentally deleted partition?
2. what is the difference between Extended NTFS and primary NTFS?
3. and this is the most thing i confused at, i'am pretty sure the hard disk drive before formated is NTFS file system, but when i recovering the hard disk with NTFS system file it not recovering any files from previous hard disk i have formated, instead it only recovering files from deleted %temp installation folder
but if i recovering it with the ext/ext2/ext3 status, it could recovering the data from the previous hard disk i've formated
could anyone give explanation about this? i am pretty sure it was NTFS file system when they stored the file in the hard disk
P.S : i am a windows user, not really familiar with linux bash command or C++, but i willing to learn if you give me some explanation
and pardon me for my bad english/grammar
i just realize it after installed the OS, split the hard drive into two partition (it used to be just one partition) and install a few software within it.
it took all days for me to read the instruction about photorec and gratefully i could recovered 95% of JPEG and docx file with just a few error.
and thanks to this incident, i became kinda interesting about digital forensic and data recovery. and i got some question after i've done my recovering
1. is that possible to make an image.dd from accidentally deleted partition?
2. what is the difference between Extended NTFS and primary NTFS?
3. and this is the most thing i confused at, i'am pretty sure the hard disk drive before formated is NTFS file system, but when i recovering the hard disk with NTFS system file it not recovering any files from previous hard disk i have formated, instead it only recovering files from deleted %temp installation folder
but if i recovering it with the ext/ext2/ext3 status, it could recovering the data from the previous hard disk i've formated
could anyone give explanation about this? i am pretty sure it was NTFS file system when they stored the file in the hard disk
P.S : i am a windows user, not really familiar with linux bash command or C++, but i willing to learn if you give me some explanation
and pardon me for my bad english/grammar