04
Section 04 · 3 guides
Recovery
Stop writing, image first, work from the copy. In that order, every time. The order is a safety rule, and everything here follows it.
- 1Stop writingUnmount, remove power. Every write after the incident costs you options.
- 2Image itA full sector copy to a healthy disk, before you browse, repair or carve.
- 3Work the copyAll repair happens on a duplicate of the image. The original is evidence, not a workspace.
Everything in this section
Stop writing, image first, work from the copy.
- The First Thing to Do When a Drive Starts ClickingStop writing. Image first. Work from the copy. In that order, every time.
- Imaging a Failing DriveWhy you copy the whole thing before you try to read any of it.
- When to Stop and Pay SomebodyThe point at which every further attempt costs you the recovery.
The other rooms
Kept running by
The Bench Roll
Eleven names who keep the lights on in this room. Listed here, marked as what they are, and never mixed into the writing.
Slots are sold as slots. Nothing on this site is a recommendation you paid to read.