Scalpel

From ForensicsWiki
Revision as of 11:19, 6 November 2005 by Jessek (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

An open source program for recovering deleted files originally based on foremost, although significantly more efficient. Written by Golden Richard and presented at the DFRWS in 2005, it allows an examiner to specify a number of headers and footers to recover filetypes from a piece of media.