RecoverYantra ยท Data recovery

The complete recovery range in one application

Data recovery, ransomware response, database extraction, mail recovery, recorder footage, drive imaging and certified erasure, delivered as one installation under a single licence key. Phone acquisition is its own product, RecoverYantra Mobile.

Licensed by a key bound to one machine, sold by the drive or image.

RecoverYantra Suite 7.8.10.76
RecoverYantra Suite screenshot
Who it is forRecovery labs, service providers and IT departments that handle every category of case and cannot choose their tools in advance.
New in 7.8.10.76

What this release adds to RecoverYantra Suite

Each item is in the shipping build of this product; the others in the range that carry it are named on the card.

Two ways to find a file - by its name in the drive's index, or by its contents in the raw bytes PhotosIMG_4821.CR2MVI_4830.MP4By the indexby name - secondsFF D8 ... FF D9By the contentsby contents - hours

Browse first, recover what you tick

The file system index is read in seconds and shown as a tree with deleted entries marked. One file, one folder or a whole volume is recovered on its own; the whole-drive scan stays one click away.

Chances legend - Good, Fair, Poor, Unknown; each has its own shape as well as its colour Good - clusters free, preview decodes Fair - partly reused Poor Unknown

Recovery chances before extraction

The allocation table says whether a deleted file's first cluster now belongs to another file, and the first bytes are checked against the format the name claims. Good, bad, unknown or unchecked, per file, before anything is written.

Verification - the source is read back and hashed; the image is hashed; the two hashes must be the same before anything is examined source (read back)9b1e ... 4a1cE2.E01 (payload)9b1e ... 4a1c

Original dates restored

Created, modified and accessed times are read from NTFS, FAT, exFAT, ext4, XFS, Btrfs, F2FS and UFS and set on every recovered file, so a recovered photograph is dated when it was taken, not when it was recovered.

What a disk image is - every byte of the drive copied, in order, into one file the driveevery bytedisk.E01 - the copy you work on

The recorder view

A recorder disk opens on its vendor index: cameras down the left, time across, play from the disk, cut from-to, download, extract one camera, enhance, capture a frame, report. In every product that carries CCTV.

Recovered files go to a different drive - never onto the one being recovered the cardD:\Recovered\... another drive

Folder layout and long names kept

A narrowed recovery keeps the ticked folder layout instead of being flattened into Photos and Documents. NTFS Win32 long names win over the DOS 8.3 name, and exFAT sub-folders are walked.

Disk image file

Ex01 and AFF4 images read as sources

Alongside raw dd, .img, .iso and E01, an image can now be read from an EnCase Ex01 or an AFF4 container and recovered from exactly as from any disk image. Output stays raw or E01, hashed on read and verified after write.

Where on the card the unreadable areas sit, start to end - 3 areas, 1.2 MB, and the damaged boot sector at the very start 032 GB64 GB boot sector

Filesystem-aware imaging with an entropy map

Imaging can copy only the areas the file system marks in use and read the rest as an entropy map, so an almost-empty or already-encrypted drive is imaged in a fraction of the passes a full sector copy would take. The full copy stays available.

Batch conversion - a file waits until it stops growing, its hash is frozen, it is remuxed losslessly (packet digests equal) or, only if ticked, recompressed and labelled so, then a manifest and a checkpoint are written; a changed or malformed input goes to quarantine with its reason 0b77 stable 30 shash frozenlosslessremuxmanifestcheckpoint quarantine: disposition + reason a changed input never converts; recompression only if ticked, and labelled

Hardware-RAID metadata and assembly

A RAID array is reassembled from its own DDF and vendor controller metadata where it is present, so level, order and stripe size do not have to be guessed; the parameters can still be set by hand when the metadata is gone.

Typical cases

What this product is bought for

If the situation below matches yours, this is the right product. If none of them do, another product in the range is likely to be a closer fit, and the last section on this page says which.

Work arrives before it can be classified, and the tool has to cover whichever kind of case it turns out to be.

A team is maintaining a different application for each category of recovery, with a separate licence and learning curve for each.

A drive is failing and has to be imaged before anything is read from it, then recovered from the copy.

The media, file system and failure mode are not known until the job is on the bench.

Key points

How RecoverYantra Suite is built

Every workspace in the range

The whole range in one build, so the case does not have to match the tool that was bought for it.

One licence, one build to maintain

A single key and one executable to deploy, train on and keep current across a team.

Image first, recover from the copy

Damaged-drive imaging with a skip map, then recovery from the image, in the same build - the order every lab follows.

Capabilities

What RecoverYantra Suite does

All supported sources

Hard disks, SSDs, memory cards, USB media, RAID arrays and storage pools, virtual disks and video recorders.

Ransomware response

Family identification, shadow copy and snapshot recovery, and extraction of the plaintext regions intermittent encryption leaves behind.

Database extraction

Page and row extraction from SQL Server, MySQL, PostgreSQL, Oracle, MongoDB, Access, dBASE, Redis and SQLite files.

Recorder footage

The recorder view opens a DVR or NVR disk on its camera index, and footage is carved from the disk vendor-agnostically. Phone acquisition and recovery are RecoverYantra Mobile's job.

Certified erasure

Sanitisation to NIST SP 800-88, verification of the result with the recovery engine, and a signed certificate.

A single tested engine

Every product is built from the same core, so a correction made in one is present in all of them.

Workspaces in this build

These are the workspaces the application contains. Anything not listed is absent from the build; it is not present and locked behind the licence.

  • Recover files from disks, cards and images
  • Ransomware triage and recovery
  • Database row extraction
  • Mailbox recovery (Outlook PST/OST, mbox, Maildir)
  • Image a failing drive
  • CCTV and DVR footage
  • Image a drive over the network
  • Bootable rescue USB
  • Cloud account recovery
  • nandrecon
  • raid
  • Repair broken video
  • Secure erase and certificate
  • Detect every connected device, with a report

The rest of the range

This page lists what the product does. Every capability across the whole range is one table, side by side, generated from the build itself - a job this product does not carry is simply in another column. Hardware cases - drives that do not spin, locked phones, encrypted volumes - are covered in the hardware help guide.

Compare all products

Partner access

Get RecoverYantra Suite

Data recovery, ransomware response, database extraction, mail recovery, recorder footage, drive imaging and certified erasure, delivered as one installation under a single licence key. Phone acquisition is its own product, RecoverYantra Mobile.

Get RecoverYantraSuite

Supplied to approved RecoverYantra partners. Apply once; your dashboard then carries every product, the licence keys for your machines and a direct line to our engineers.

Become a partnerTell us about your business. Applications are reviewed by a person, and you will hear from us by email.
Apply for access
Already a partnerSign in for the current build, your keys and support.
Partner sign in
Version 7.8.10.76Windows 10 or 11, 64-bitRead-only against your drives

System requirements

  • Windows 10 or 11, 64-bit
  • Administrator rights to read a physical drive. Working from a disk image needs none.
  • A separate destination with room for the recovered data. Results are never written to the drive being read.

Linux

The engine is standard-library Python and runs on Linux from source. A packaged Linux build is available on request.

Specifications

RecoverYantra Suite at a glance

ProductRecoverYantra Suite, version 7.8.10.76
PlatformWindows 10 and 11, 64-bit. Administrator rights are needed to read a physical drive; working from a disk image needs none.
Workspaces included14 of 15 in the range: Recover files from disks, cards and images, Ransomware triage and recovery, Database row extraction, Mailbox recovery (Outlook PST/OST, mbox, Maildir), Image a failing drive, CCTV and DVR footage, Image a drive over the network, Bootable rescue USB, Cloud account recovery, nandrecon, raid, Repair broken video, Secure erase and certificate, Detect every connected device, with a report
File types recovered261 formats carried in the signature table, searched together with file system parsing.
Access to the sourceRead-only for the whole session. The application refuses a destination on the drive being read.
LicensingA signed key bound to this machine's code, verified offline. Sold by the source: one use is one drive or image, and the same source is free afterwards. No account and no network access at any point.
Before a keyScan, browse and preview without a key; the key is asked for when files are first saved from a source.
DependenciesNone. A single executable, with no runtime, framework or third-party package to install.
Companion programsRecoverYantra Agent (RecoverYantra-Agent.exe), installed beside the command line - Runs on the machine being acquired: serves its disks and snapshots read-only to a console holding the pairing key, reports the machine to the roster. Installed by the MSI the console builds (remote package --msi), or run by hand.
How it is suppliedThrough the partner programme. The build is 159 MB; its SHA-256 is shown beside the download in your partner dashboard.
Related products

Where the rest of the range fits

These products carry workspaces RecoverYantra Suite does not. The list is derived from the catalogue, so it cannot point at a product that lacks the capability too.