I'm trying my best to determine a method of recovering some deleted data on my Samsung S5.
I've used tools such as Recuva in the past to recover files on flash drives and devices of that nature. However, when plugging my Android device into the computer, it seems I can only select options such as Charging, MTP, etc - none of which actually assign a drive letter to the device and therefore make it impossible to run these recovery tools. I see USB Mass Storage used to be an option, but appears to have been removed from the Android OS at some point.
The device was accidentally wiped and reset. It is rooted with SuperSU installed, and I've been taking special care to not use the device so I can avoid overwriting data. I've tried multiple Android-specific recovery tools, though they either don't recognize that the device is rooted or never prompt for root permissions, and therefore haven't been of any use.
My question is this:
- Is it somehow possible to mount the device as a drive so that I can run recovery tools against it as I would a flash drive.
- Otherwise, is there some way to mirror the entire disk so I can run recovery tools against it separate from the physical device?
I've figured out how to make an image of the disk, I believe (it's a 14.7 GB image, and the internal disk is only 16GB, so I'm thinking I imaged the right partition), and that seems to be some progress. I did the following:
adb pull /dev/block/mmcblk0 mmcblo0.img
Now that I have this image, I've tried scanning it with a tool called Autopsy, but I don't see many deleted files listed. How should I proceed given an image of the disk?