this post was submitted on 13 Apr 2025
9 points (90.9% liked)
techsupport
2748 readers
2 users here now
The Lemmy community will help you with your tech problems and questions about anything here. Do not be shy, we will try to help you.
If something works or if you find a solution to your problem let us know it will be greatly apreciated.
Rules: instance rules + stay on topic
Partnered communities:
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
First of all, if you're here, can afford it and the data is important enough to you, please pursue a professional service. (At least a couple hundred, depending on size)
If the data is important and you simply can't afford it and won't in the future or the data is just not that important, read on.
In a lot of cases you get one chance to make an image, please seriously consider professional services
First, remove the drive from the enclosure, Google model + "disassembly", you want to bypass the enclosures shitty controller. This is almost assuredly why the tools are having issues
Then you'll need a SATA to USB (or a desktop with spare SATA ports) and connect it
Now, you need to focus on making to a byte-to-byte image (NEVER do data recovery work off the physical drive). I typically use a piece of data recovery software called R-Studio (that I totally paid for.....) but Testdisk has imaging functionality https://www.cgsecurity.org/wiki/Image_Creation
However, if you can boot to Linux, read up on and use a tool called 'ddrescue' it's specifically designed to make a drive image by first getting all the good easy stuff first and then going back with different methods over the problematic parts.
If you get a complete image without any read errors, you may have lucked out and the enclosure controller just crapped out
You will need enough space that is at least the label size of the disk you're working with. It's going to be a byte-to-byte image basically an exact mirror of the drive regardless of if there's data in a sector or not, so if the disk is 500GB the resulting image will be 500GB.
Once you have as much of a complete image as you can, then you are safe to work off that image as much as you need (though for extra safety id make a copy of it)
Out of interest, do recovery services look at the data they've recovered? I'd rather not have them potentially seeing all the pirated content alongside the personal data I need to recover.
I can't tell you for sure, I don't actually work in data recovery I just learned a lot about it because of...dumb decisions lmfao
But from what I've gleaned, they generally don't seek it out, but their tools will show them previews n such so that they can keep on eye on if things are coming through corrupted or not
Nobody cares about your horse porn. They have seen worse.