Data Recovery Case File · Cameras, Drones & Cards · The Half He Left Behind

Why the software found exactly the 200 he already had: deleted entries versus a torn directory — the two different kinds of invisible, decoded — and the second half of the shoot recovered from the card that "went empty"

His enquiry contained a genuine puzzle and two sharp questions. The story: a camera SDHC card opened on the laptop, "the serial numbers of all the JPEG and RAW photographs appeared on screen — over 400." He cut half across to the laptop, edited for several days, then reinserted the card for the remaining 200 — "only to find that the card was empty." Free recovery software's result was the puzzle's key: "it only found the first 200 that I already had." His questions: does anyone have advanced software that could find the rest — and, sharply observed: "the fact that the card originally listed all the photographs, does this mean the lost ones could be on the computer?" Both get their honest answers below — the second one first, because it clears the ground: no, listing is not copying, and the missing 200 never left the card. Which is exactly why they're recoverable — and why the software's strange half-result is the best diagnostic clue in the case.

The decode: two kinds of invisible, and why the software saw only one

First, his good question answered: listing is not copying. When the card's 400 photographs appeared on screen, the laptop was reading the card's directory — names and entries served live from the card itself. Displaying a listing transfers nothing; only the 200 he actually moved ever landed on the computer. (One small honest footnote: operating systems sometimes cache thumbnails of images they've displayed — postage-stamp previews, no substitute for photographs, but occasionally a last-resort consolation. His real photographs, though, have one home: the card.)

The puzzle's key — why the software found exactly the wrong 200: here's the elegant part. His "cut" of the first half was, as this archive's move cases explain, a copy-then-delete: those 200 became freshly deleted entries on the card — precisely the species that free undelete software is built to find. The other 200 remained live, normal files... until the card's directory tore (a corruption event on removal or reinsertion — the "card was empty" moment), at which point they became invisible in a completely different way: not deleted, but unlisted behind a damaged catalogue. So the free tool did exactly what undelete tools do — walked the recognisable deleted entries and recovered them — and came back proudly carrying the 200 he already had, blind to the torn live directory where the ones he wanted actually sit. The result wasn't failure or absurdity; it was a diagnosis: two kinds of invisible, and consumer software only reads one.

What "advanced" actually means here: his word for what he needs is close — but the difference isn't a stronger scanner; it's methodology. The professional road images the card once, write-blocked, then works both kinds of invisible on the copy: the torn directory reconstructed so the live-but-unlisted half re-lists with names and order intact, and the whole surface carved by content — every JPEG and RAW identified by its own internal signature and validated by rendering — so nothing depends on either catalogue, deleted or torn. The recovered set is then reconciled against the 200 he holds, and the shoot stands complete.

On the bench

The card was imaged write-blocked behind the DeepSpar USB Stabilizer 10Gb — its first connection since the mystery, and its last needed — and both invisibles were worked on the copy. The torn directory was reconstructed, the live-but-hidden second half re-listing exactly where the shoot had left it; OSForensics carved the full surface by signature alongside, each frame validated by rendering, catching anything the catalogue repair couldn't name. The recovered photographs were reconciled against his transferred 200 — duplicates resolved, the missing half confirmed present — and the complete 400-plus shoot was verified and delivered. The card had never lost his second half; it had only lost the ability to mention it.

The outcome

The remaining 200 photographs recovered from the card, reconciled with his edited half, verified frame by frame and delivered. Free assessment, one fixed written figure including VAT, no recovery, no fee. The puzzle, solved for every owner whose software returns exactly the files they already have: cut-deleted entries and corruption-hidden live files are two different kinds of invisible — undelete tools see only the first — listing photographs on a screen never copies them anywhere, and a card that "went empty" days after half a transfer has usually torn its catalogue over a fully intact second half, waiting on reconstruction rather than a stronger scanner.

Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.