Category Archives: gegevens redden

Recover deleted Bitlocker partition using DMDE

Last few weeks I stumbled onto several cases where file recovery software didn’t detect these deleted partitions. And even though these tools can decrypt Bitlocker partitions, they have to be able to find it first. I used DMDE. In one case DMDE detected the partition straight away, which is boring so I won’t get into… Read More »

Disk Drill 6 sneak preview (GoPro Recovery) + Discount

I was asked to try Disk Drill 6 beta, in particular I was asked to comment on the new Action Camera Module that was specifically designed to recover video data from GoPro, DJI action cameras, but also for example ‘normal’ Sony cameras. What’s so special about Action Cam videos? What makes them hard to recover?… Read More »

WD MyBook Live drives wiped – Data Recovery

Earlier this week ‘rumors‘ started spreading about WD MyBook Live NAS devices were remotely instructed to return to factory settings. Well, this is no longer a rumor, it is happening. I write this blogpost as I learn new stuff about this issue so nothing of this is written in stone and I will update and… Read More »

Recover lost or deleted Bitcoin Wallet.dat using R-Studio

While this blog post covers my initial ‘research’, intention of this blog is to give an easier to digest guide into recovering or undeleting a Bitcoin wallet.dat file. Note that if you delete files or lose files due to formatting on a SSD, they are beyond DIY Recovery!! In that case you increase chances of… Read More »

Can data be recovered from an erased or zero filled drive?

Overwriting Hard Drive Data: The Great Wiping Controversy Okay, this is another one that annoys me: The claim, the myth that certain three letter agencies can recover data from erased or zero filled hard drives. The claim that those can magically ‘read’ and reconstruct data from ‘latent magnetic residue’ (I am not making this up,… Read More »

JpegDigger’s JPEG repair feature explained

JpegDigger features a JPEG repair option. What is this and what can it do? Repair will not per se result in a perfect image. It can however repair JPEGs to a degree where they can be opened and viewed, including their flaws. JPEG structure Let’s first look at how a JPEG file is organized internally.… Read More »

RAW file recovery and duplicates

Recovery is resulting in duplicate photos One of the drawbacks of ‘raw recovery’ is that generally files are recovered with auto generated meaningless filenames. To conclusively identify files you have to open them although initial culling can be done by sorting by size, or with help of a tool that can sort files by creation date,… Read More »

Some thoughts on signature based file recovery

But first, file system based recovery I am A ‘Windows person’ and deal with data recovery on file systems that were for the most part designed by Microsoft. As a consequence I can predict with reasonable certainty the chances of successful data recovery after you formatted your NTFS drive. Because I understand what such a… Read More »

USB Stabilizer, flash drives and ‘the big three’

Notification: Since this blogpost R-Studio has addressed USB Stabilizer issues (not tested yet), UFS Explorer has added functionality to streamline operation with USB Stabilizer (tested, nice!) and ReclaiMe reworked their imaging module (not tested yet). Just FWIW. I have been experimenting with imaging flash. Using R-Studio, ReclaiMe Pro and UFS Explorer, the ones that I… Read More »