Reply to thread

Message: <blockquote data-quote="Neemobeer" data-source="post: 733564" data-attributes="member: 91900"><p>Timing is pretty critical for recovering files, if you don't attempt it right away it's very unlikely you will be able to recover them.  When a file is deleted the index in the MFt is marked as available and the data remains on the disk.  In this case data is pretty easy to recover.  Even if a new OS is installed it's typically installed on the same physical sectors of the disk.  As new data is written it will start overriding those marked deleted item locations.  Once a file is written one or more times to the location the old file was stored at it's likely gone at that point.</p></blockquote><p></p>