Extracting data from damaged NTFS drives | by Andrea Lazzarotto

Introduction File system analysis is a very important part of digital forensics. A lot of investigations involve hard drives whose contents need to be analyzed. Possibly, deleted files might need to be recovered as well. There are several file system types and NTFS is currently one of the most popular.....

March 10, 2017
Subscribe
Notify of
guest

2 Comments
Newest
Oldest Most Voted
Inline Feedbacks
View all comments
5 years ago

Hello, Andrea Lazzarotto? I hope you see this. After running the command recuperabit /dev/sdb3 -o Recovery -s Windows10.save the scan asks me to proceed so I say yes, and it begins the scanning process but then after sometime of scanning, it seems like it all just comes to a halt and never continues. It doesn’t prompt me to enter another command, the scan just stops with no prompt. If I do try to enter another command, nothing happens. Please help me figure out what to do. I absolutely need to recover some files.

Lazza
4 years ago
Reply to  Adam Rubio

Did you let it scan for a reasonable amount of time? Please note that scanning may take a couple hours for large drives. Anyways, feel free to continue the discussion on GitHub.

This post is not the right place to discuss issues. :)

© HAKIN9 MEDIA SP. Z O.O. SP. K. 2023