logoalt Hacker News

code_biologistyesterday at 11:36 PM0 repliesview on HN

Anybody got tips for making custom signatures work? I'm trying to rescue Unreal Engine game save files off an EXT4 drive where the containing directory was deleted. I put the `sav 0 "GVAS"` (GVAS is the UE save magic value) in my `.photorec.sig`. `fidentify` correctly works on reference UE saves I have. Grepping the raw partition device finds many hits for GVAS, but photorec runs and doesn't recover any files...

[1] https://www.cgsecurity.org/testdisk_doc/photorec_custom_sign...