| Author |
Message |
   
Cindy Hyde
Username: ilovelabs
Registered: N/A
| | Posted on Wednesday, Sep 10, 2008 - 4:29: | |
I am attempting to restore all files that begin with 20080328 and end in .CR2 or .JPG. Am I able to restore them (.CR2 or .JPG) from .XFC.BAK files? If so, please provide the steps. Tried unsuccessfully to locate the files through the browser in WinHex. Many thanks! |
   
Stefan Fleischmann
Username: admin
Registered: 1-2001
| | Posted on Wednesday, Sep 10, 2008 - 18:26: | |
> I am attempting to restore all files that begin with > 20080328 and end in .CR2 or .JPG. (I assume you mean files whose names begin and end with those characters. Important difference for file selection/data recovery purposes.) > Am I able to restore them (.CR2 or .JPG) from .XFC.BAK files? No, case files do not contain any contents of files on the original media. > Tried unsuccessfully to locate the files through the > browser in WinHex. If they are present on the media in question and part of the volume snapshot in X-Ways Forensics/WinHex, you will find them by exploring recursively and using the following filename filter expressions: 20080328*.cr2 20080328*.jpg |
|