Responding to a File recovery incident
From Jonsdocswiki
Having determined that file recovery is necessary, it's time to make some initial checks:
- Is the device physically damaged
- Is the USB memory stick snapped in 2?
- Does the hard disk have a dent in it?
- Do we have sufficient storage space to attempt recovery?
- If you're trying to recover a 320GB drive and only have a 160GB drive to receive the recovered data, recovery will be incomplete.
- Is the device encrypted? Encryption will make recovery significantly more difficult, if not impossible.
- Have anti-viral precautions been considered if the file recovery is of an infected machine?
Once all these have been considered you may start your recovery: Data Recovery part 1.
If recovery of data following the part 1 instructions fail, you may wish to attempt advanced data recovery.
If recovery fails after both methods you're looking at a much more in depth recovery procedure at which point you need to ask yourself is the data financially worth the time and cost of further recovery?. If so then I recommend speaking to a Data Recovery expert.
