cgsecurity.org

huges wrote: 02 Sep 2017, 19:13 You wrote:
"This chapter does not concern copies or downloaded files, only files written by some digital camera, not by your computer"
The files are simply dragged and dropped files from the SD card to the Toshiba external hard drive

This method will not work to recover video from the Toshiba external hard drive, only to recover video from the SD card.

Hi Christope,

Do you mean that Photorec cannot recover data from an external hard drive? Why?

Can you please reply to my other questions...

You haven't yet commented on the "not EVERY ftyp.mov file has a corresponding mdat.mov file"... can you please comment? is it possible that 2 or 3 ftyp.mov files would go with a mdat.mov file?
Unless this is what you are referring to here where you write:
"This solution works only for videos written in two fragments. Videos from GoPro HD2, Hero3-Black Edition, HERO4 Silver are stored in more than 2 fragments, so special software solutions are needed to recover such videos"

At this point I have not been able to concat the files because I receive a reply looking like this:
hugos-MacBook-Pro:recup_dir.1 hugoknight$ cat f1816064_mdat.mov f0317440_ftyp.mov > new.mov
-bash: new.mov: Permission denied
However when I look at the permissions in finder it says I have full permissions for read and write.

I tried changing the permissions using chmod and received the reply:
"Unable to change file mode on f0317440_ftyp.mov: Operation not permitted”

I will try using "chown -R username:groupname recup_dir.*" as per your instructions.

Replace username and groupname by the correct values, see 'id' output... where should I see 'id' output? what is 'id' output? is that where I will find the correct values?

PhotoRec can recover files from disk as long as they were not fragmented prior to deletion and if the filesystem does not use transparent encryption or transparent data compression.

id is a Mac OS command https://developer.apple.com/legacy/libr ... /id.1.html
The method using ftyp.mov and mdat.mov concerns only videos on memory cards.
So don't both with the id or chown commands.

PhotoRec has been able to recover some of your videos. I have no idea how to recover your other video files.