the actual process of data recovery

@lovejeet-etHdkD • Oct 12, 2024

Oct 12, 2024

1.1K

we rush for the data recovery as soon as some important files gets deleted up accidentally. but i wonder how the process of recovery actually works out. One thing i listened up is that when we delete the data, the pointers to the memory locations just clear up, not the data on those memory locations, so when we try to occur, it establishes back the pointers and data is recovered. Is this true?? n if yes, then still, HOW!!!

Like 0 Replies 5

Replies

Welcome, guest

Join CrazyEngineers to reply, ask questions, and participate in conversations.

CrazyEngineers powered by Jatra Community Platform

Kaustubh Katdare

@thebigk • Apr 17, 2012

When a file is 'visually deleted' from the computer; the operating system only removes the 'path' to that file. That means, all the ones and zeroes that made up the file are still there on the drive. The data recovery process involves identifying all those places where your original file was 'actually stored'.

I think computer engineers will be able to answer your query in a much better way. 😀
0
Anoop Kumar

@anoop-kumar-GDGRCn • Apr 17, 2012

lovejeet
One thing i listened up is that when we delete the data, the pointers to the memory locations just clear up, not the data on those memory locations, so when we try to occur, it establishes back the pointers and data is recovered. Is this true?? n if yes, then still, HOW!!!
yes , only the starting pointer will be deleted. but the whole data is still in disc.
Its like a house is still there and address is removed from adress directory.Recovery softwares are able to link chunks of deleted files and recover them .
Now recovery softwares are very optimized and can even recover files which got overwritten as HDD are magnetic disc and intensity of magnetic field help them to recover overwritten files.

Don't know how SSD deals with recovery in overritten files☕
0
lovejeet

@lovejeet-etHdkD • Apr 18, 2012

ya, but how do re locate back the pointers, that, is, to the starting pointer of the data chunk after being removed.
0
Anoop Kumar

@anoop-kumar-GDGRCn • Apr 18, 2012

See this ... #-Link-Snipped-#
It will clarify you and you can experiment with it by manually deleting data and recovering them directly from address.👍

0
PraveenKumar Purushothaman

@praveenkumar-66Ze92 • May 6, 2012

ianoop
See this ... #-Link-Snipped-#
It will clarify you and you can experiment with it by manually deleting data and recovering them directly from address.👍
Awesome information bro... Would try it out and share the experience! 😀

0