Difference between pages "Residual Data on Used Equipment" and "CarvFs"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
m
 
 
Line 1: Line 1:
Used hard drives are frequently a good source of images for testing forensic tools. That's because many individuals, companies and organizations neglect to properly sanitize their hard drives before they are sold on the secondary market.
+
CarvFs is a modular [[Fuse]] based user space file system on top of [[LibCarvPath]].  
 +
CarvFS makes CarvPath style annotations as used by LibCarvPath available as files.
 +
Using CarvFs makes it possible to process carved entities as files without the need for copy-out.
  
You can find used hard drives on eBay, at swap meets, yard sales, and even on the street.  
+
CarvFs is modular with respect to access to image files.
 +
The CarvFs distribution comes with a default module for access to (split) raw files.
  
 +
A separate [[Libewf]] module is available for access to [[Encase image file format|EWF images]].
  
=Newsworthy Used Hard Drive Stories=
+
== External Links ==
 
+
* [http://sourceforge.net/apps/mediawiki/carvpath/ CarvPath wiki]
There have been several incidents in which individual have purchased a large number of hard drives and written about what they have found. This web page is an attempt to catalog all of those stories in chronological order.
+

Revision as of 01:26, 11 August 2012

CarvFs is a modular Fuse based user space file system on top of LibCarvPath. CarvFS makes CarvPath style annotations as used by LibCarvPath available as files. Using CarvFs makes it possible to process carved entities as files without the need for copy-out.

CarvFs is modular with respect to access to image files. The CarvFs distribution comes with a default module for access to (split) raw files.

A separate Libewf module is available for access to EWF images.

External Links