I accidentally deleted about 200 critical Canon raw files from my 6tb (1.6 free) working drive filled with hundreds of thousands of photos, and this deletion sadly propagated to my backups.
The deleted files were the last things deleted from my disks, and thankfully I caught it immediately, and no writes have taken place since.
I am currently running Photorec on the raw disk, searching only for .tif. It is of course returning a ton of files, over 120,000 so far. It hasn't returned the ones I am looking for yet, but the scan is only about half way done.
As far as I am able to tell, there is no way to undelete, or search only empty space on HFS, correct? So what I am doing is the most efficient way to search for these files, right?
Based on the specifics of my scenario, is it likely that the files will be recovered? Objectively I would guess that yes, they are there and able to be recovered, but we are 30 hours deep and it is hard to stay positive!
Any input would be most appreciated, thanks!
macOS, .CR2 - Double check my method?
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
cgrenier
- Site Admin
- Posts: 5432
- Joined: 18 Feb 2012, 15:08
- Location: Le Perreux Sur Marne, France
- Contact:
Re: macOS, .CR2 - Double check my method?
photorec should be able to recover your files.
photorec can not restrict its data search to HFS+ free space only. But it's possible if you combine it with TSK ( http://www.sleuthkit.org/sleuthkit/download.php )
Remember that no file should be written on the partition you want to recover files from.
photorec can not restrict its data search to HFS+ free space only. But it's possible if you combine it with TSK ( http://www.sleuthkit.org/sleuthkit/download.php )
Code: Select all
diskutil list
blkls /dev/disk1s1 > hfsplus_free.dd
photorec hfsplus_free.ddRe: macOS, .CR2 - Double check my method?
Thanks for the reply, that's good to know.
For what it's worth, I was able to recover my files! The entire recovery process was a stressful 47 hours, but in the last few hours the target files were finally recovered.
Thanks again!
For what it's worth, I was able to recover my files! The entire recovery process was a stressful 47 hours, but in the last few hours the target files were finally recovered.
Thanks again!