How to recover just the deleted files

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
lacosta667
Posts: 1
Joined: 13 May 2019, 20:54

How to recover just the deleted files

#1 Post by lacosta667 »

Good Day,

I have recently deleted a shooting day of Prores and WAV files and am now in the process of trying to recover it on my 3TB external HD.
The problem is, I still have 9 other shooting days on the hard drive that are in order, but photorec is recovering all the existing files as well. Does anyone know how to look for just the deleted stuff?

Thanks in Advance !!

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: How to recover just the deleted files

#2 Post by cgrenier »

PhotoRec can recover files from the free space of a FAT32, NTFS, exFAT, ext2/3/4 filesystem.
If you are recovering from HFS+ or APFS filesystem (macos computer), PhotoRec will recover both deleted and non-deleted files.

To recover from the freespace of an HFS+ filesystem, a workaround is run use blkls from the sleuthkit https://www.sleuthkit.org/ and run photorec on the resulting hfsplus_free.dd file.

Code: Select all

blkls /dev/disk1s2 > hfsplus_free.dd
photorec hfsplus_free.dd

Locked