Difference between revisions of "Scalpel"

From ForensicsWiki
Jump to: navigation, search
m
(Scalpel is GPL, buried in the README in the latest tarball)
(5 intermediate revisions by 3 users not shown)
Line 4: Line 4:
 
   os = {{Linux}}, {{Windows}}, {{Mac OS X}} |
 
   os = {{Linux}}, {{Windows}}, {{Mac OS X}} |
 
   genre = [[Carving]] |
 
   genre = [[Carving]] |
   license = {{Unknown license}} |
+
   license = {{GPL}} |
 
   website = [http://www.digitalforensicssolutions.com/Scalpel/ digitalforensicssolutions.com/Scalpel/] |
 
   website = [http://www.digitalforensicssolutions.com/Scalpel/ digitalforensicssolutions.com/Scalpel/] |
 
}}
 
}}
  
'''Scalpel''' is an [[open source]] program for [[recovering deleted data]] originally based on [[foremost]], although significantly more efficient. Written by [[Golden Richard]] and presented at the [[DFRWS]] in 2005, it allows an examiner to specify a number of headers and footers to recover filetypes from a piece of media.
+
'''Scalpel''' is an [[open source]] program for [[recovering deleted data]] originally based on [[foremost]], although significantly more efficient. Written by [[Golden G. Richard III]] and presented at the [[Digital Forensic Research Workshop|DFRWS]] conference in 2005, it allows an examiner to specify a number of headers and footers to recover filetypes from a piece of media.
 +
 
 +
== External Links ==
 +
 
 +
* [http://www.digitalforensicssolutions.com/Scalpel/ Official website]
 +
* [http://dfrws.org/2005/proceedings/richard_scalpel.pdf Scalpel: A frugal, high-performance file carver] from the Proceedings of the 2005 [[Digital Forensic Research Workshop]]

Revision as of 07:18, 26 March 2013

Scalpel
Maintainer: Golden Richard
OS: Linux,Windows,Mac OS X
Genre: Carving
License: GPL
Website: digitalforensicssolutions.com/Scalpel/

Scalpel is an open source program for recovering deleted data originally based on foremost, although significantly more efficient. Written by Golden G. Richard III and presented at the DFRWS conference in 2005, it allows an examiner to specify a number of headers and footers to recover filetypes from a piece of media.

External Links