ATTENTION: The new home of the Digital Forensics Wiki is at https://forensicswiki.xyz/. Yeah, it's a silly name, but it was cheap.
This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn

Difference between revisions of "Zero storage carving"

From ForensicsWiki
Jump to: navigation, search
(Created page with 'Zero storage carving is the concept of using techniques to enable doing carving of meaningfull and processable chunks or files of uncompressed unencoded data on disks, disk-…')
 
(3 intermediate revisions by the same user not shown)
Line 2: Line 2:
 
disk-images or container files without the need for additional storage to be allocated for copies of the relevant data chunks or files.
 
disk-images or container files without the need for additional storage to be allocated for copies of the relevant data chunks or files.
 
Zero storage carving is sometimes also referred to as in-line carving.
 
Zero storage carving is sometimes also referred to as in-line carving.
 +
 +
Tools with support or facilities for zero storage carving include:
 +
 +
* [[tsk-cp]]
 +
* [[scalpel]]
 +
* [[PhotoRec]]
 +
* [[CarvFs]]
 +
* [[LibCarvPath]]
 +
* [[OCFA treegraph API]]

Revision as of 10:17, 28 August 2009

Zero storage carving is the concept of using techniques to enable doing carving of meaningfull and processable chunks or files of uncompressed unencoded data on disks, disk-images or container files without the need for additional storage to be allocated for copies of the relevant data chunks or files. Zero storage carving is sometimes also referred to as in-line carving.

Tools with support or facilities for zero storage carving include: