© 2023 R-Tools Technology Inc.
All rights reserved.
File recovery from Apple computers with Secure Enclave .
Due to hardware implementation of data encryption, data recovery from Apple's Secure Enclave is currently impossible.
Secure Enclave is used in Intel-based Mac computers that contain the Apple T2 Security Chip and Mac computers with Apple silicon.
Many specific data recovery cases are discussed in the R-TT's Data Recovery Guide .
Depending on the situation, data recovery may vary:
1. | Recovery of deleted files that have resided on an existing logical disk |
This can be done using Basic File Recovery .
2. | Recovery of files that have resided on a data disk with a damaged file system, or on a previously deleted or re-formatted partition |
If the file system on such logical disk is damaged, the operating system does not see that logical disk as a partition without a valid file system . Such partition should be previously scanned . Also, it should be scanned if you want to recover data on a previously deleted or re- formatted partition.
You may use Fast Search for Lost partitions if you want only to find partitions previously existed on the disk. It's much faster.
When the partition is scanned, a number of recognized partitions will appear. R-Studio shows them in different colors depending on which elements of the partition have been found.
|
An existing partition |
|
An existing partition after drive scan |
|
A recognized partition. Both boot records and file entries are found for this partition |
|
A recognized partition. Only file entries are found for this partition |
|
A recognized partition. Only boot records are found for this partition |
|
A fast found partition |
|
Empty space on the object |
|
A deleted partition |
|
Files that have been found using scan for known file types (raw file search). |
Although such recognized partitions are virtual objects, files can be searched for and recovered from recognized partitions as from real logical disks using Basic File Recovery .
To successfully recover files from a recognized partition, it is necessary to find a right one which corresponds to the real logical disk on which the files resided. No strict rules can be applied to that, but the following considerations should be taken into account:
• If you are going to recover files from a disk with a damaged file system , most likely the right recognized partition will be a green one.
• If you are going to recover files from a previously deleted or re-formatted partition , most likely the right recognized partition will be a yellow one.
Also always check the recognized partition's file system, start point, and size. They should be the same for the recognized partition and real logical disk/partition. When in doubt, try to preview a couple of files from the recognized partition. If the files are seen correctly, this is the right partition.
Contact Information and Technical Support