Page 1 of 1

Can DE do specific extension recovery? How

Posted: 18.03.19, 12:52
by SLAB_TEAM0
Hi everybody,
and thanks in advance for any answers.
After head swap i need only to recover 3 file type from a huge NTFS partition, which its FS structures are all correctly identifyied.
My customer only need 3 file extension types, which related total capacity is about 1% of the whole partition dimension.
How can I correctly set saving option to save only these ?

Re: Can DE do specific extension recovery? How

Posted: 18.03.19, 13:35
by MasterT
Scan MFT of NTFS partition.

Than on MFT Scan --> Root --> Right Click --> Find Files --> *.jpg; *.pdf; *.doc; *.mp3 or whatever files you like.

Re: Can DE do specific extension recovery? How

Posted: 18.03.19, 13:53
by SLAB_TEAM0
MasterT wrote:Source of the post Scan MFT of NTFS partition.

Than on MFT Scan --> Root --> Right Click --> Find Files --> *.jpg; *.pdf; *.doc; *.mp3 or whatever files you like.

Thank you MasterT. This is what I was looking for.

Re: Can DE do specific extension recovery? How

Posted: 18.03.19, 14:59
by Amarbir[CDR-Labs]
d_d_recovery wrote:Source of the post You can use the GREP search and set it to search for specific file types only. It also allows you to set parameters for file types not set in the database. You will need a few sample files for header extraction if that is the case.

Hi ,
What Are You Talking About ,This is Totally Wrong Procedure ,Why Should He Scan Entire HDD For File Extensions When He Has His MFT Totally Intact ,De Is More Powerful Then You Can Think It Is ,Infact Its Beyond Any of US ,The Proper Procedure Is What MasterT Has Said

Re: Can DE do specific extension recovery? How

Posted: 21.03.19, 08:39
by Nick_TS
MasterT wrote:Source of the post Than on MFT Scan --> Root --> Right Click --> Find Files --> *.jpg; *.pdf; *.doc; *.mp3 or whatever files you like.


Good method, also there is an option of the filter by extensions (MFT Scan --> Root --> Filter --> Ext )