Difference between revisions of "Scalpel"

From Forensics Wiki
Jump to: navigation, search
m
Line 8: Line 8:
 
}}
 
}}
  
'''Scalpel''' is an [[open source]] program for [[recovering deleted data]] originally based on [[foremost]], although significantly more efficient. Written by [[Golden Richard]] and presented at the [[DFRWS]] in 2005, it allows an examiner to specify a number of headers and footers to recover filetypes from a piece of media.
+
'''Scalpel''' is an [[open source]] program for [[recovering deleted data]] originally based on [[foremost]], although significantly more efficient. Written by [[Golden G. Richard III]] and presented at the [[Digital Forensic Research Workshop|DFRWS]] conference in 2005, it allows an examiner to specify a number of headers and footers to recover filetypes from a piece of media.
  
=References=
+
== External Links ==
Richard III, G.G. and Roussev, V. Scalpel: A frugal, high-performance file carver. In Proceedings of the 2005 Digital Forensics Research Workshop
+
 
 +
* [http://www.digitalforensicssolutions.com/Scalpel/ Official website]
 +
* [http://dfrws.org/2005/proceedings/richard_scalpel.pdf Scalpel: A frugal, high-performance file carver] from the Proceedings of the 2005 [[Digital Forensic Research Workshop]]

Revision as of 18:58, 2 April 2007

Scalpel
Maintainer: Golden Richard
OS: Linux,Windows,Mac OS X
Genre: Carving
License: Unknown license
Website: digitalforensicssolutions.com/Scalpel/

Scalpel is an open source program for recovering deleted data originally based on foremost, although significantly more efficient. Written by Golden G. Richard III and presented at the DFRWS conference in 2005, it allows an examiner to specify a number of headers and footers to recover filetypes from a piece of media.

External Links