Re: Tools to retrieve images from dead hard drive and/or deleted partitions
Hi,
On Fri, Dec 28, 2012 at 01:19:21PM +0100, Ralf Mardorf wrote:
> On Fri, 2012-12-28 at 12:50 +0100, berenger.morel@neutralite.org wrote:
> > > I have heard good things of PhotoRec:
> > >
> > > http://en.wikipedia.org/wiki/PhotoRec
> > > http://www.cgsecurity.org/wiki/PhotoRec
> > >
> > > But I have no personal experience of it. The advice is always to
> > > copy the
> > > drive that needs rescuing to another drive, and work on the copy, not
> > > the
> > > orginal. Again, I have not tried it.
> > >
> > > Lisi
> >
> > Thanks for the hint, I'll try it this afternoon on (2)
>
> Mount the drive read only, than there is no need to backup. There are
> all kinds of commands to recover data, usually they don't recover the
> data on the corrupted drive, but save the files to another place, so
> it's no problem to mount a drive read only.
Yah, if you can mount, then it is good idea to mount as read-only first
to recover and secure data by copying them to another disk.
But that may not get you as much data as we wish. testdisk/photorec
tools can work on corrupted disk without using normal mounting. You
certainly need place to write recovered data. Making disk image and
working on it makes things easy.
Osamu
Reply to: