Data Recovery Case File · Cameras, Drones & Cards · Most Came Back
A Folder Reporting Empty on a Card That Is Three-Quarters Full Is a Structure Fault
His enquiry reports a partial success and a precise remainder. Video footage on a card "reading three-quarters full, but when I opened the clip folder it said it was empty" — with most files subsequently recovered by consumer software and five still outstanding. The capacity figure and the empty folder cannot both be describing reality, and the discrepancy is the whole diagnosis: the content is there and the structure describing it is not.
| Media | Memory card holding video footage — reported capacity substantially occupied while the clip directory presents as empty; majority of files recovered by prior software, five outstanding |
| Reported situation | Card reporting approximately three-quarters of capacity in use · clip folder presenting as empty · consumer recovery software run by the owner · majority of files recovered · five files outstanding · video footage required |
| Fault class | Directory structure damaged with content retained — occupancy figure confirming data present; residual files likely fragmented or partially referenced |
| Equipment used | Occupancy figure reconciled against directory contents to confirm content presence · card imaged write-blocked before any further scanning · signature carving targeted to the video format present · fragmented streams reassembled by continuity rather than by directory reference · recovered clips validated by playback |
The decode: why the two figures disagree, and what the missing five are likely to be
Where the occupancy figure comes from: the filesystem's record of which regions are allocated. That is maintained separately from the directory listing files, so one can survive while the other does not.
What their disagreement establishes: the card is holding data. Three-quarters occupied with an empty folder means the space is marked as in use and nothing describes what is using it — which is direct evidence that the footage is present rather than deleted.
Why that is a considerably better starting point than an empty card: a genuinely empty card reports its space as free. The occupancy figure is the reassurance here, and it is worth noting because it is easy to overlook when a folder appears empty.
Why most files came back: video clips are large and written sequentially, and they begin with recognisable structures. Consumer software searching for those openings finds whole clips without needing the directory, which is why a scan succeeded where the folder did not.
Why five did not, and this is the informative part: the ones that fail a signature scan are typically those that are fragmented. A clip written in pieces across non-adjacent regions cannot be reassembled by finding its opening alone — the scan locates the start and then has to guess where the rest continues.
Why fragmentation happens on a card that seems simple: a card written, partially cleared and written again develops gaps. A long clip recorded into a card with scattered free space is placed in whatever fits, so its pieces are not contiguous.
What is done differently for those: the pieces are reassembled by continuity rather than by reference. Video has internal structure that continues predictably, so a fragment can be matched to its predecessor by content rather than by any record — which a general-purpose scan does not attempt.
Why the remaining structures are still worth reading: even a damaged directory frequently retains partial records. Sizes and starting positions for some files may survive, and those narrow the search for the fragments considerably.
Why his prior scan has not harmed the position: software run from a computer against a card generally reads rather than writes. Provided nothing was installed onto the card or saved back to it, the card is in the state it was.
What must not happen: no returning the card to a camera, and no accepting an offer to repair or format it. The occupancy figure that proves the footage is there is exactly what a format would clear.
On the bench
The occupancy figure was reconciled against directory contents to confirm content presence — allocation records being maintained separately from the directory, so substantial reported occupancy alongside an empty folder establishes that regions are in use and undescribed rather than free. Carving was targeted to the video format present, whole sequential clips being locatable by their openings, while fragmented streams were reassembled by continuity rather than by directory reference, non-adjacent pieces being matched by internal structure.
The outcome
The occupancy figure reconciled against the directory, the card imaged before further scanning, and fragmented streams reassembled by continuity. Free assessment, one fixed written figure including VAT; on cards where content has been deleted or overwritten, the figure is payable upfront. The decode: a card three-quarters full with an empty folder proves the footage is there. The five that did not come back are most likely fragmented — a scan finds a clip's opening and cannot tell where the rest continues.
When most files come back and a few do not
Take the occupancy figure seriously, since it's the reassurance most people overlook: a card reporting three-quarters full with an empty folder is telling you the space is in use and nothing describes it, which is direct evidence your footage is present. The files that resist a scan are usually the fragmented ones — a clip written in non-adjacent pieces can be found by its opening, but a general scan can't tell where the rest continues. Those need reassembling by internal continuity instead. Don't put the card back in the camera or accept any offer to format it.
Keep the card out of the camera — call Easy Data Recovery on 028 9002 0144; occupancy reconciled against the directory, imaged before further scanning, fragments reassembled by continuity.
Request a quote online →
Our case files are drawn from genuine enquiries received by our laboratory over the past ten years, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery procedure our engineers apply to that fault, using the equipment listed.