Deleted file recovery used to be done by reading the filesystem on the disk. If it were a Mac OS disk for example, then the HFS+ filesystem would be interpreted by the software, and an analysis would be made to try to determine what data was previously present before the deletion was performed. In this way, each different filesystem would be developed for and interpreted in its own individual way, and each filesystem would have its own success rates and caveats.
The success or failure of the file recovery attempt was also generally based on the state of the filesystem at the time. If the filesystem had been heavily modified after the file deletion had taken place, then there would be less chances of being able to undo that deletion. Likewise if the filesystem was heavily corrupted or if it had been formatted, that would often mean that no file recovery would be possible. If the disk had been formatted, then nothing would be recoverable.
It did have some advantages; the folder layout and filenames would sometimes be preserved. Sometimes it would retrieve deleted files result that getting files back was a quick and painless process. So while it was not so reliable, when it did work it could be very convenient.
This method is generally not possible these days, because filesystems have become more complex, and also because when it comes to deleted file recovery people demand functionality above all else.
没有评论:
发表评论