ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Scalpel"

From ForensicsWiki
Jump to: navigation, search
m
m
Line 1: Line 1:
 
An open source program for [[recovering deleted data]] originally based on [[foremost]], although significantly more efficient. Written by [[Golden Richard]] and presented at the [[DFRWS]] in 2005, it allows an examiner to specify a number of headers and footers to recover filetypes from a piece of media.
 
An open source program for [[recovering deleted data]] originally based on [[foremost]], although significantly more efficient. Written by [[Golden Richard]] and presented at the [[DFRWS]] in 2005, it allows an examiner to specify a number of headers and footers to recover filetypes from a piece of media.
 +
 +
http://www.digitalforensicssolutions.com/Scalpel/

Revision as of 18:10, 25 January 2006

An open source program for recovering deleted data originally based on foremost, although significantly more efficient. Written by Golden Richard and presented at the DFRWS in 2005, it allows an examiner to specify a number of headers and footers to recover filetypes from a piece of media.

http://www.digitalforensicssolutions.com/Scalpel/