Data Clinic - Data Recovery Services
  • Email
  • Facebook
  • Twitter
Call Us Free: 0800 151 2207
  • Data Recovery Home
  • Data Recovery Services
    • Hard Drive Recovery
    • External & USB Drives
    • RAID / Server Recovery
    • NAS
    • SSD
      • Surface Pro Data Recovery
      • SanDisk SSD Data Recovery
      • Lenovo SSD Data Recovery
    • SD Cards
    • Mobile Phones & Tablets
      • >How The Process Works
      • Android Data Recovery
      • iPhone Data Recovery
      • Samsung Data Recovery
      • Sony Xperia Data Recovery
      • Nokia / Windows Data Recovery
      • Water Damaged Phones
      • Expert Phone Rebuilds and Repairs
    • CCTV & DVR
    • Macs
    • Windows Computers
    • Lost & Deleted Files
    • Advanced Forensic Data Recovery (ADR) Services
    • Password Recovery
    • Forensic Investigation
    • Encrypted Volumes
      • Bitlocker
      • Check Point Endpoint
    • Bitcoin, Crypto & NFT Wallet Recovery
    • Tape Recovery
    • Tape eDiscovery & Conversion
    • Advanced Recovery Service
    • Spare Parts & Donor Drives
    • Disk Manufacturers
      • Seagate Hard Drive Data Recovery
      • Western Digital Hard Drive Data Recovery
      • Toshiba Hard Drive Data Recovery
    • SCSI Data Recovery
    • SQL Recovery
    • How Do Hard Drives Fail ?
  • Locations
    • Belfast
    • Birmingham
    • Bristol
    • Edinburgh
    • Glasgow
    • Leeds
    • Leicester
    • Liverpool
    • London – Central
    • London – City
    • Manchester
    • Newcastle
    • Northampton
    • Sheffield
    • Southampton
  • Help & Advice
  • News
  • About Us / Contact

Mac OS X – Notes for Data Recovery

Background to OS X: Mac OS X running the HFS+ volume is the most widely used of all Unix type operating systems. Many of Mac OS X’s key components are based upon Berkeley Software Distribution (BSD) operating system, which is a Unix based operating system (you may have heard the term ‘UNIX BASED’, or even seen it on the Apple website, Apple is very keen to get the UNIX reliability message across). Many elements of the BSD world are still apparent. The file permissions model, symbolic links, and user home directories are all concepts inherited from BSD. Being based on BSD means that OS X is more stable and has better memory and processor management. As most Mac users are aware OS X also gives the user the option of using UFS, a true UNIX file system providing greater compatibility with UNIX applications and other UNIX systems.

Brief File System History: Whilst many of Mac OS X’s traits have been borrowed from UNIX the default file system that Mac OS X uses is an advanced version of Apple’s own file system HFS (Hierarchical File System). First employed in 1986 when System 3 (OS 3) was released, HFS was introduced as a replacement to MFS (Macintosh File System) addressing some issues that MFS had encountered as time, and the systems MFS was used on, progressed.

As the amount of data on an MFS volume increased so did the need for quicker ways of finding it, HFS was needed to increase the speed of the System 3 Finder. In the original System 3 Finder each file on the system was catalogued in a single operating system file, every time a file was required the Mac had to search the contents of this system file until it found the location of the data required, this could often prove quite time consuming. HFS+ has taken the HFS file system one step further adding a number of changes that allow HFS to keep up with the times and improve compatibility with other systems. Although it is essentially the same, HFS+ offers larger file names and file sizes and supports Unicode making it more internationally friendly, the file system also offers meta-data extensions which may allow for future improvements or additions.

Data Recovery: Many of the advancements in Mac OS X are a positive hindrance to data recovery techniques, damaged Mac volumes are meandering and complex making tracking down the original directory and file structure difficult. Highly fragmented volumes are extremely difficult to piece together.

Trashed files are overwritten with random characters so as to make their recovery impossible. Also both copies of the volume header are destroyed during initialisation and formatting, making it impossible to work out how a drive was partitioned and without looking at the hard disk at a very low level. It even proves difficult to work out which of the two file systems the disk was using.

Data recovery from corrupt / initialised Mac OS X disks is not by any means impossible, it does however involve a lot more labour than recovery from a Windows or Linux partition. Whilst on an NTFS or many of the various Linux distribution file systems there are areas of the disk (and copies) specifically designed to store data about file and directory location, in an HFS+ partition this data is stored in a hierarchical tree structure, each directory or file within this structure has an inode number.

The inodes start with the root directory and then branch off to each of the sub-directories, which in turn branch off into their subdirectories and so on, if the top levels of this structure are damaged (as is often the case with the damaged Mac disks that we see), there is no pointer to the lower levels. This makes finding all of the data very difficult indeed.

Data Clinic have created specialist recovery software in-house that searches for traces of these inodes and recreates a directory structure using them, this complex procedure involves scanning the hard disk, firstly for all the unique signatures of these inodes & then for the routes in which their trees are spread across the disk. Our software and processes are based on research and in depth experience with Apple Mac volumes. Please call to find out what Data Clinic can do for you.

Data Clinic Reviews

Data Clinic Ltd - Manchester
Data Clinic Ltd - Manchester
4.5
Based on 215 reviews
See all reviewsWrite a review
Joseph Tobias
Joseph Tobias
09:21 22 Nov 23
Great service. Expensive but got the job done. Obviously it's terrifying sharing a 'nearly correct' crypto wallet seed with a company but the wallet was cracked and all funds were returned. Chris understands crypto, communicates well, and makes the process smooth and risk-free. Recommend.
Miklos Kemecsi
Miklos Kemecsi
21:34 14 Nov 23
I'm SO glad to have found this company, they literally saved my life! Chris Seeley and his colleagues at DataClinic were extremely helpful and understanding. They recovered my wallet within 1 day!Thanks again, what a brilliant service!Much recommended!!
  • Apple Mac Data Recovery
    • iPhone and iPad Recovery
    • Apple Xserve Data Recovery
    • Mac OSX Data Recovery
    • Mac OSX
    • Classic Apple Data recovery
    • iPod Data Recovery

Free Advice
and Consultation


Learn More

Nationwide
Recovery Centers


Learn More

Proven
Success Rate


Learn More

LONDON
68 Lombard Street
EC3V 9LJ
Tel: 0207 111 0964

New London House
EC3R 7LP
Tel: 0207 111 0964

BELFAST
The Mount, Belfast BT6 8DD
Tel: 0282 024 7021

BIRMINGHAM
11 St Pauls Square, Birmingham B3 1RB
Tel: 0121 629 0436

BRISTOL
Castlemead, Bristol BS1 3AG
Tel: 0117 322 6585

EDINBURGH
St Andrews Square, Edinburgh EH2 2AF
Tel: 0131 242 0037

GLASGOW
Tay House, 300 Bath Street, Glasgow, G2 4JR
Tel: 0141 301 1677

LEEDS
Building 3, City West Business Park, Gelderd Road, Leeds, LS12 6LN
Tel: 0113 254 9741

LEICESTER
3rd Floor, St. George's House, 6 St George's Way, Leicester LE1 1QZ
Tel: 0116 319 0115

LIVERPOOL
Horton House, Exchange Street East, Liverpool, L2 3PF
Tel: 0151 268 5255

MANCHESTER
The Pavilions, Bridge Hall Lane, Bury, BL9 7NX
Tel: 0161 761 0620

NEWCASTLE
116 Quayside, Newcastle, NE1 3DY
Tel: 0191 447 1227

NORTHAMPTON
400 Pavilion Drive, Northampton, NN4 7PA
Tel: 01604 529356

SHEFFIELD
The Balance, 2 Pinfold Street, Sheffield, S1 2GU
Tel: 0114 208 6027

SOUTHAMPTON
Basepoint, Andersons Road, Southampton SO14 5FE
Tel: 0114 208 6027


(c) 2020 Data Clinic Ltd - Data Recovery Services. Click to visit Data Clinic's DATA RECOVERY homepage.