Page 1 of 1

photorec recovered files naming convention

Posted: 09 Jun 2015, 10:12
by zird
Hi,

I'm new to file carving and has just started using photorec for a project. Can anybody tell me what does the numbers after t/f of the names of recovered files represent? I am trying to map a list of file paths (retrieved from mft) to the files I have carved using photorec, any advice will be much appreciated!

Thank you very much

Re: photorec recovered files naming convention

Posted: 12 Jun 2015, 20:23
by cgrenier
- The number is the sector number.
- f=file
- t=jpg thumb
- b=broken file