A co-workers wife had her mac laptop re-imaged at work and lost a lot of data that she thought was backed up, but was not. I use r-studio to recover deleted data all of the time but what are my chances of getting back data after a re-image? I don't have a "professional" computer forensic software suite so any tips or ideas of what to use would be greatly appreciated.
Thanks,
Matt
I suppose it depends on how the support staff at her company writes images to the disk. If it is a 500GB disk and a 500GB image then obviously everything would be overwritten. If they just overwrite a portion of the disk then r-studio has HFS/HFS+ support and should be able to carve for what is left.
Of course there are a hundred variables dual-boot, wipe before reinstall, swap drives, are just a few possibilities that come to mind.
