Difference between pages "Thumbnails" and "Talk:Scalpel"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(info about thumbnails for files on encrypted filesystems)
 
 
Line 1: Line 1:
'''Thumbnails''' are reduced-size versions of pictures, serving the same role for images as a normal text index does for words.
+
Has anyone used this tool yet?
 +
I have downloaded it and will install it in the near future.
 +
Thanks,
  
== [[Windows]] ==
+
Redloco
  
See [[Thumbs.db]].
+
: Yes, I've used it with great success. What would you like to know? [[User:Jessek|Jessek]] 10:40, 7 August 2008 (UTC)
  
== [[Windows]] Vista ==
+
I've used Foremost with success, but haven't tried Scalpel.
 
+
[[Thumbs.db]] no longer exists in Vista. This data has been moved to ''\Users\\AppData\Local\Microsoft\Windows\Explorer''
+
 
+
[[Windows]] Vista will save thumbnails for files on a mounted [[TrueCrypt]] volume.
+
 
+
== KDE & GNOME ==
+
 
+
KDE and GNOME are popular desktop environments for [[Linux]] and [[UNIX]] platforms. They are storing thumbnails in ''~/.thumbnails''.
+
 
+
Example thumbnail in GNOME:
+
 
+
<pre>
+
$ hachoir-metadata .thumbnails/normal/0d97afdc637ac86d75d13e72172dc77c.png
+
Metadata:
+
- Image width: 128 pixels
+
- Image height: 122 pixels
+
- Bits/pixel: 24
+
- Pixel format: RGB
+
- Compression rate: 1.6x
+
- Compression: deflate
+
- Producer: GNOME::ThumbnailFactory
+
- Comment: Thumb::Image::Width=779
+
- Comment: Thumb::Image::Height=744
+
- Comment: Thumb::URI=file:///media/truecrypt1/123.jpg
+
- Comment: Thumb::MTime=1216153400
+
- MIME type: image/png
+
- Endian: Big endian
+
</pre>
+
 
+
GNOME will save thumbnails for files on mounted encrypted filesystems.
+

Revision as of 10:54, 7 August 2008

Has anyone used this tool yet? I have downloaded it and will install it in the near future. Thanks,

Redloco

Yes, I've used it with great success. What would you like to know? Jessek 10:40, 7 August 2008 (UTC)

I've used Foremost with success, but haven't tried Scalpel.