sort by deleted date

Recuva Recuva Suggestions
1

The Recuva scan reports the "Last Modified" date only.

Is there anyway to list files by Deleted Date in the report??

Yesterday I deleted about 350GB on a backup drive, then about 1Gb of new date was written to that drive.

(A backup program did this for me, I accidently configured it to copy files to that drive and erase everything that was not in the source drive) .

I only want to recover yesterdays deletions (maybe 80,000 files), although the overwritten files may be toast.

Apparently "EaseUS" displays by Deleted Date.

2

As far as i'm aware there are four timestamps in the MFT file record, File Creation, File Modification, File Accessed and MFT Record Modification. These timestamps are held in the $STANDARD_INFORMATION and $FILE_NAME attributes. Unfortunately none of these timestamps are changed on file deletion, as the MFT record as a whole is flagged as invalid. So a file deletion date would be unavailable. I don't know what EaseUs displays.

3

Thank you Augeas for the quick reply. My mistake, EaseUS does NOT sort by Deletion Date, apologies. It does have a Filter were you can select "Date Modified"

  • Today, Yesterday, Last 7 Days, Last 1 Month, Custom

I was assuming that "Date Modified" would include deletions, but I guess not.

Thank you!