Page 1 of 1

How to recover just the deleted files

Posted: 13 May 2019, 21:00
by lacosta667
Good Day,

I have recently deleted a shooting day of Prores and WAV files and am now in the process of trying to recover it on my 3TB external HD.
The problem is, I still have 9 other shooting days on the hard drive that are in order, but photorec is recovering all the existing files as well. Does anyone know how to look for just the deleted stuff?

Thanks in Advance !!

Re: How to recover just the deleted files

Posted: 14 May 2019, 06:02
by cgrenier
PhotoRec can recover files from the free space of a FAT32, NTFS, exFAT, ext2/3/4 filesystem.
If you are recovering from HFS+ or APFS filesystem (macos computer), PhotoRec will recover both deleted and non-deleted files.

To recover from the freespace of an HFS+ filesystem, a workaround is run use blkls from the sleuthkit and run photorec on the resulting hfsplus_free.dd file.

Code: Select all

blkls /dev/disk1s2 > hfsplus_free.dd
photorec hfsplus_free.dd