Understand File Recovery in Mac OS X, MAC and Linux in this article explain Mac OS X, MAC and Linux file recovery methods and tools.
In Mac OS X, data deletion can be possible due to the following reasons:
- Emptying the Mac Trash folder
- Using the Shift+Del keys
- Corruption in a hard drive
- Virus or Trojan Infection
- Unexpected system shutdown
- Software or hardware malfunction
Recovering deleted files in Mac OS X has three methods:
1. Method One:
When a user deletes a file from Mac-based file system, the system does not remove it completely; instead, it removes the directory of files from the folder. This de-allocates the space allocated to the file, and the freed space is available for re-allocation to store some other files. The system then sends the deleted files to the folder named “Trash.” Navigate to the Trash folder, select the file, right-click (ctrl-click) on it, and select the Put Back option to recover the deleted files.
2. Method Two:
If user Shift-deletes the fires, it bypasses the “Trash.” Investigators can still retrieve such files with data recovery techniques. Time Machine is a local Mac utility program that helps in data recovery:
- Check for the “Time Machine” application in the utilities folder.
- Click the Time Machine option from the menu bar and select Enter Time Machine.
- The system will display arrows that will help in navigating across the system snapshots or use the timeline displayed on the right side.
- Double click the file to preview the file and its version.
- Click Restore button and the system will restore it in the original folder location.
- Even the Backup folder might contain the accidentally deleted files.
3. Method Three:
If the previous method fails to recover the deleted files, then use third-party software to recover files emptied from the Trash.
Note: Apple Inc., had introduced the Time Machine utility as a built-in feature in its proprietary Mac OS systems starting with the 10.5 “Leopard” version.
Related Product : Computer Hacking Forensic Investigator | CHFI
File Recovery Tools: MAC
Some of the software tools that help you recover deleted files in Mac include
1. AppleXsoft File Recovery for Mac
Source: http://www.prosofteng.com
AppleXsoft File Recovery for Mac is a file recovery tool for Mac. The tool scans and recovers files from the hard disk and external storage devices. It supports RAID recovery. The tool includes few advanced tools such as RAID Reconstructor, Mail Recovery, Hex Viewer, SMART, Bad Block Diagnostics, Imaging tools, and Disk Copy.
2. Disk Doctors Mac Data Recovery
Source: http://www.diskdoctors.net
Disk Doctors Mac Data Recovery tool recovers data from corrupt, deleted, and inaccessible partitions formatted by Mac. The tool recovers files from drives damaged by any virus attack, power failure, system crash, or files lost clue to human error. It can recover after the volume has been reformatted, even with a different file system. It can also handle the disks with bad sectors.
3. R-Studio for Mac
Source: http://www.r-tt.com
R-Studio for Mac is Mac data recovery software from R-TT. R-Studio for Mac is designed for the Mac OS environment. It recovers files from I-IFS/HFS+ (Macintosh), FAT/NTFS/ReFS (Windows), UFS1/UFS2 (FreeBSD/OpenBSD/NetBSD/Solaris), and Ext2/Ext3/Ext4 FS (Linux) partitions. In addition, raw file can be used for heavily damaged or unknown file systems. The tool can recover data on disks, even if their partitions are formatted, damaged, or deleted.
4. Data Rescue 4
Source: http://www.prosofteng.com
Data Rescue for Mac software recovers files from a crashed or virus-corrupted hard drive. It recovers photos, videos, and documents from crashed, corrupted, or non-mounting hard drives; accidentally reformatted hard drives or reinstalled OS; and previous deletion, damaged, or missing files. It can recover all file types from any HFS/FIFS+ formatted drive.
5. Stellar Phoenix Mac Data Recovery
Source: http://www.stellarinfo.com
Stellar Phoenix Mac Data Recovery software recovers documents, photos, music, or videos lost due to deletion from any HFS, HFS+, FAT, ExFAT, and NTFS format-based file system. It can perform Mac file recovery on iMac, MacBook Pro, Air, Mac Mini, and Mac Pro. It recovers all deleted files with their original file names. This tool can support RAW recovery on lost volumes.
6. FileSalvage
Source; http://subrosasoft.com
FileSalvage recovery tool for Mac recovers the lost files, iTunes libraries, iPhoto collections, and lost data. This tool can recover files from a normal Mac OS hard drive, USB key, PC disk, Linux disk, FAT32 disk, FLASH card, scratched CD, Digital Camera, iPod, and file system that are recognized in Mac OS X.
7. 321 oft Data Recovery
source: http://www.321soft.com
321Soft Data Recovery for Mac recovers deleted, inaccessible, and lost files from Mac’s hard drive. It can recover files Lost due to deletion, formatting of the drive, partition errors, corrupted file system, hard disks, solid state drives (SSDs), memory cards, USB sticks, CD/DVD discs, and various other storage devices.
8. Disk Drill for Mac
Source: http://www.cleverfiles.com
Disk Drill for Mac recovery tool recovers data lost due to partition errors on external hard drives, files, and documents in the internal hard drive. It recovers and runs through all of its scanning functions and display a list of files that can be potentially recovered. This tool allows previewing the files and lets you choose the ones that can be successfully recovered.
Also Read : File Recovery Tools: Windows
9. Mac Data Recovery Guru
Source: http://macosxfilerecovery.com
Mac Data Recovery Guru, available for Mac Devices, recovers deleted files. It can recover files from a disk that has been formatted or with a corrupted file system, or files with no file system at all. The tool can make it files stem independent. The tool can work on hard disks, USB flash sticks, USB hard disks and 5SDs, SD cards, digital cameras, and android phones and tablets that are plugged into Mac.
10. Cisdem DataRecovery 3
source: http://www.stellarinfo.com
Cisdem DataRecovery 3 software recovers photos, videos, documents, etc. on Mac hard drives and external devices. It can restore files from Mac hard drives, external hard drives, Mac notebooks, desktops, Mac server, USI3 drives, camcorders, memory cards, SD cards, digital cameras, mobile phones, laptops, and MP3 and MP4 players. The tool restores the lost partition and gets back the data from FIB+, FAT16, FAT32, exFAT, ext2—ext4, and NTFS file systems.
File Recovery in Linux
In Linux, the users can delete the files using “rm” command, but the file will remain on the disk. If a running process keeps a file open and then user removes or deletes the file, then its contents will occupy space on the disk, which other programs or files will not be able to reclaim. The second extended file system (ext2), the most commonly used file system in Linux, shows several places where data can hide.
It is noteworthy that if an executable erases itself, its contents can be retrieved from a / proc memory image. The command cp /proc /$PID/exe/tmp/file creates a copy of a file in / tmp.
The main advantage Linux has over Windows is its ability to access and recover data from otherwise problematic machines. The Linux kernel supports a large number of file systems, including VxFS, UFS, HFS, and the aforementioned NTFS and FAT file systems.
Some file systems are not readable in a Windows environment and users can easily recover such files using a bootable Linux distro, such as Knoppix.
Questions related to this topic
- Which is best software for data recovery?
- What is the best data recovery software for Mac?
- Can Mac OS read NTFS?
- Is Disk Drill for Mac safe?
This Blog Article is posted by
Infosavvy, 2nd Floor, Sai Niketan, Chandavalkar Road Opp. Gora Gandhi Hotel, Above Jumbo King, beside Speakwell Institute, Borivali West, Mumbai, Maharashtra 400092
Contact us – www.info-savvy.com
