Notifications
Clear all

Encase 'recover folders' command

9 Posts
8 Users
0 Reactions
1,563 Views
(@snidley)
New Member
Joined: 14 years ago
Posts: 3
Topic starter  

I have read the previous thread on this question and while my situation is similar, it doesn't match. Using Encase 6.18.1I am unable to see the recover folders option. I have the dongle in place and have confirmed that Win7 sees it. Unlike the other thread I have all the filters and enscripts available to me.

I am trying to recover a formatted laptop drive. Following the instructions in the Help menus I have right clicked on the volume but there is no Recover Folders option visible. What am I missing?


   
Quote
(@angrybadger)
Estimable Member
Joined: 18 years ago
Posts: 164
 

I have read the previous thread on this question and while my situation is similar, it doesn't match. Using Encase 6.18.1I am unable to see the recover folders option. I have the dongle in place and have confirmed that Win7 sees it. Unlike the other thread I have all the filters and enscripts available to me.

I am trying to recover a formatted laptop drive. Following the instructions in the Help menus I have right clicked on the volume but there is no Recover Folders option visible. What am I missing?

Recover folders will work only within an existing file system.
If there are no partitions on the disk then its got nothing to work with.
Look for the Partition finder enscript.


   
ReplyQuote
(@yunus)
Estimable Member
Joined: 17 years ago
Posts: 178
 

"Recover folders" work only with NTFS drives. So, if the partition you are working on is a drive formatted other than NTFS, "recover forlders" command will not appear.


   
ReplyQuote
(@miket065)
Estimable Member
Joined: 21 years ago
Posts: 187
 

Yes, sounds like you need to "Add a User Defined Partition"…


   
ReplyQuote
(@angrybadger)
Estimable Member
Joined: 18 years ago
Posts: 164
 

"Recover folders" work only with NTFS drives. So, if the partition you are working on is a drive formatted other than NTFS, "recover forlders" command will not appear.

Recover folders will work with both FAT and NTFS volumes.


   
ReplyQuote
(@joann0011)
New Member
Joined: 14 years ago
Posts: 2
 

right click at local c or d drive ? and see whether there is recover folders?
correct me if i'm wrong. thanks


   
ReplyQuote
ForensicRanger
(@forensicranger)
Estimable Member
Joined: 16 years ago
Posts: 122
 

Yes, right click on the drive letter - Recover Folders should be an option.


   
ReplyQuote
(@georgefan)
Eminent Member
Joined: 14 years ago
Posts: 27
 

Recover Folders really works well dealing with freshly formatted drive,since only the FAT1/2 and the Root Dir is renovated,the content of the folder still exists.When a drive is not formatted,it is not as effective as when formatted,since when deleting a folder,the content of the folder(often coccupys one cluster) is vulnerable to be overwritten,resulting in having to find files(previously under the folder) using file finder


   
ReplyQuote
(@alf95)
Eminent Member
Joined: 18 years ago
Posts: 43
 

Try Testdisk/photorec -> http//www.cgsecurity.org/wiki/TestDisk … it's free !


   
ReplyQuote
Share: