CafeArt Posted January 24, 2022 Share Posted January 24, 2022 The Recuva scan reports the "Last Modified" date only. Is there anyway to list files by Deleted Date in the report?? Yesterday I deleted about 350GB on a backup drive, then about 1Gb of new date was written to that drive. (A backup program did this for me, I accidently configured it to copy files to that drive and erase everything that was not in the source drive) . I only want to recover yesterdays deletions (maybe 80,000 files), although the overwritten files may be toast. Apparently "EaseUS" displays by Deleted Date. Link to comment Share on other sites More sharing options...
Moderators Augeas Posted January 24, 2022 Moderators Share Posted January 24, 2022 As far as i'm aware there are four timestamps in the MFT file record, File Creation, File Modification, File Accessed and MFT Record Modification. These timestamps are held in the $STANDARD_INFORMATION and $FILE_NAME attributes. Unfortunately none of these timestamps are changed on file deletion, as the MFT record as a whole is flagged as invalid. So a file deletion date would be unavailable. I don't know what EaseUs displays. Link to comment Share on other sites More sharing options...
CafeArt Posted January 24, 2022 Author Share Posted January 24, 2022 Thank you Augeas for the quick reply. My mistake, EaseUS does NOT sort by Deletion Date, apologies. It does have a Filter were you can select "Date Modified" Today, Yesterday, Last 7 Days, Last 1 Month, Custom I was assuming that "Date Modified" would include deletions, but I guess not. Thank you! Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now