![]() ![]() Rawdrive.raw: DOS/MBR boot sector partition 1 : ID=0x7, start-CHS (0x0,0,3), end-CHS (0x3ff,254,63), startsector 2, 1465149166 sectors, extended partition table (last)Ĭonfirming the startsector is 2 (2 x 512 = 1024). Here’s what I did: I query parted with ‘parted rawdrive.raw’ which returns: Number Start End Size Type File system Flagsġ 1024B 750156374015B 750156372992B primary ntfs type=07 can only see the NTFS partition, it seems I have to mount rawdrive.raw using the start offset as determined by the NTFS file system which has overwritten the HFS+ partition. Now I have a raw clone of the HDD I need to mount it so I can run TestDisk and try to repair the deleted Mac partitions. $ ddrescue -d -r3 /dev/sdi rawdrive.raw driveclone.log The HDD is undamaged but to be safe I’ve created a raw image of the disk to work on. I’m assuming the file system was HFS+ as the external disk was originally initialized and used on her Mac laptop (either Yosemite or Sierra). ![]() I have a client who appears to have accidentally deleted her MacOS formatted partition table while trying to access her external HDD from a windows PC. Firstly, thanks to Wendell for the awesome video on ddrescue and TestDisk over at ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |