Posts: 1
Threads: 1
Joined: Sep 2024
Hi,
I am newbie here. Is there any way to get back my lost or deleted excel file...... There are a lot's of things which is most important for me. I want to get it back at any cost....
Posts: 111
Threads: 1
Joined: Apr 2023
If it's really important, just shutdown your computer and give it to someone who knows how to recover files. Every write you make on disk will decrease chance of recovery.
Posts: 893
Threads: 15
Joined: Sep 2017
09-10-2024, 01:04 PM
(This post was last modified: 09-10-2024, 01:07 PM by Snoopy.)
as mentioned every write process could destroy your data, so turn of your pc
(you will need another storage device like an external usb-drive to store the data)
if the file was stored on an additional harddrive except for your systemdrive, unplug it, this way you can till use your systemdrive to prepare the needed tools ->
depending on your knowledge or ask a friend, make a bootable K.a.l.i Linux USB-Stick, set up your bios/UEFI to boot from that stick, first do a try run without replugging your drive and start into K.a.l.i forensic mode (this way all attached harddisk will mounted read only) if this works, turn of your pc, replug your hard drive and start again
use guymager to get a forensic 1:1 copy of your disk, use encase E01 Format with fast compression (this way empty space is compressed/skipped) and store it to your external drive, now you have a unaltered copy of your data you can work with hint you need to start guymager explicit as root, otherwise it will crash when choosing your external drive as storage
you can use linux (sleuth kit together with autopsy) or autopsy for windows, maybe i would use this if you are not familiar with linux at all, install, import your forensic image into autopsy and start scanning for deleted files (maybe your file is alread shown where it was stored, so try looking there first