When a file is deleted from the MAC OS filesystem, the file name is also removed. Unless the name is embedded in the header of the cluster of the file, there is no way to retrieve the name. If the name is embedded, VirtualLab is designed to retrieve it. If you are not seeing a name, and only a number, then the application does not store the name so that it is not retrievable. When recovering a deleted file from the Mac operating system, be sure to set your scan type to ‘Deleted File Recovery’. If you don’t then every file type (existing and deleted) that is found on the scanned device will show in the results. To limit the results to only deleted files, it’s important that you choose the Deleted File Recovery scan.
