1

I "accidentally" did factory reset my sister's phone. I'm interested in trying out AccessData FTK Imager but the problem is i don't know how to load the android filesystem for insepection?

Or more broadly, how to recover from factory reset. No backups, no google sync.

Improve this question
4
  • Why do I feel that this is SPAM?
    – Firelord ♦
    Commented Nov 8, 2015 at 11:15
  • @Firelord know what you mean, but it seems legitimate enough. Even if it is SPAM, some later user could use it
    – Dan Brown
    Commented Nov 8, 2015 at 11:42
  • seems spammy :/
    – moonbutt74
    Commented Nov 9, 2015 at 14:35
  • not a spam. if this is somehow a duplicate, take the appropriate measures. It's not that I don't trust google results, it's just that I trust this site.
    – Mywiki Witwiki
    Commented Nov 9, 2015 at 22:10

1 Answer 1

Reset to default
1

There is no way to roll back a factory reset. There are, however, ways to recover data from the internal drive.

As always, if your are dealing with a potentially catastrophic loss scenario make a copy of the current state. The time-tested way is to clone the state by using dd via the adb (Android Debug Bridge) tool from the Android SDK. Guymager may be an alternative but I haven't used it for this purpose yet.

After creating a clone you can attach the phone to a PC and try your luck with Testdisk or the less powerful but easier to use Recuva (MS Windows only). If this is not working out, bring in the big guns.

Get a copy of Paladin (it includes Autopsy/Sleuth-Kit, a powerful forensics tool) and start digging. Be warned, this can take a long time.

Improve this answer
1
  • How did you say you can use Recuva for the dd image? I tried mounting the image using OSFMount and it mounts as a ext3 filesystem, for what it's worth. Now Recuva see's the partition but treats it as invalid.
    – Mywiki Witwiki
    Commented Nov 9, 2015 at 22:12

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .