Difference between pages "Category:Live CD" and "LibCarvPath"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
 
 
Line 1: Line 1:
<div style="margin-top:0.5em; border:2px solid #ff0000; padding:0.5em 0.5em 0.5em 0.5em; background-color:#dddddd; align:center;">
+
LibCarvPath is a library designed to be used by carving and file system analysis tools.
'''Note:''' We're trying to use the same [[tool template]] for all devices. Please use this if possible.
+
LibCarvPath allows fragments represented by offset and size to be combined in a CarvPath
</div>
+
annotation that take the form of file system paths. LibCarvPath addresses the limits of
 +
file system paths by mapping extremely fragmented files to a uniquely identifying key in
 +
a long-path database.
  
; [[BackTrack]]
+
The following tools use LibCarvPath and/or CarvPath Annotations:
; [[Matriux]]
+
; [[CAINE Live CD]]
+
; [[DEFT Linux]]
+
; [[THE FARMER'S BOOT CD]]
+
; [[FCCU Gnu/Linux Boot CD]]
+
; [[grml]]
+
; [[Helix3]] ([[Helix3 Pro]])
+
; [[MacQuisition Boot CD]]
+
; [[Masterkey Linux]]
+
; [[PlainSight]]
+
; [[Recovery Is Possible]]
+
  
; [[SAFE Boot Disk]]
+
* [[CarvFs]]
: The first and only commercially available forensically sound Windows Boot disk.
+
* [[tsk-cp]]
: Includes built-in driver support, access to the NTFS file system and built-in software write blocking.
+
* [[scalpelcp]]
: http://www.forensicsoft.com/catalog/product.php
+
* Modules for the [[Open Computer Forensics Architecture]] that use the [[OCFA treegraph API]].
  
; [[SMART Linux]]
+
Next to these, in [[Photorec]] work has started to include LibCarvPath support.
: Two [[Live CD | Live CDs]] built on top of [[Slackware]] and [[Ubuntu]]. Includes [[SMART]] and other forensic tools.
+
: http://asrdata2.com
+
  
; [[WinFE|Windows Forensic Environment (aka WinFE, Windows FE)]]
 
  
== Deprecated or out of date Live CDs ==
+
[http://sourceforge.net/projects/ocfa/  http://sourceforge.net/projects/ocfa/]
 
+
; [[Knoppix STD]]
+
; [[Penguin Sleuthkit]]
+
; [[SNARL]]
+
; [[SPADA]]
+
 
+
==See Also==
+
* [[:Category:VMWare Appliances]]
+
 
+
[[Category:Tools]]
+

Revision as of 04:06, 28 October 2009

LibCarvPath is a library designed to be used by carving and file system analysis tools. LibCarvPath allows fragments represented by offset and size to be combined in a CarvPath annotation that take the form of file system paths. LibCarvPath addresses the limits of file system paths by mapping extremely fragmented files to a uniquely identifying key in a long-path database.

The following tools use LibCarvPath and/or CarvPath Annotations:

Next to these, in Photorec work has started to include LibCarvPath support.


http://sourceforge.net/projects/ocfa/