![]() Your data will not be indexed, it will be all over the drive, often in fragments, it is possible to put all these pieces back together, but you must figure out what is important and what isn't, otherwise you will spend forever recovering that data There are a number of propeitry tools available under windows to recover files from such disks, in Linux there is testdisk, scalpel and autopsy (the sleuth kit) These days, whenever you delete a file you are just deleting the reference to that file, and whenever you format a disk, you are just recreating the structure, data is simply re-writtenĪ fun past time of mine is buying cheap hard drives off eBay and examining their contents, most people just format the disk, they don't wipe it There are two ways to format a disk, you can rewrite the disk with zero's and place a new filesystem in thereĪs disk space has been increasing, this has been becoming less and less common as it can be very time consuming Pv is optional, it just tells me how much data is remaining, it will slow things down, here I have told it to expect 500g of data, if you exceed this the backup wont stop, if you just use pv on it's own it will just display how much information is passing, and bzip2 will compress the backup, depending on what type of data was on the disk this will save you a lot of space but also be very time consuming, you may also remove this pipe If possible, make a backup, if there was a lot of free space you may be able to make use of compressing this backupĪs a superuser, whenever I need to do such a backup I run dd if=/dev/sda|pv -s 500g|bzip2|dd of=/path/to/backup make sure your backup is located on a separate disk First things first STOP USING THIS DISK IMMEDIATELY
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |