From Forensics Wiki
Revision as of 00:30, 11 August 2012 by Joachim Metz
The tools are:
- mmls-cp : A CarvPath based version of mmls for listing a partitioned carvpath disk images as a list of partition carvpaths.
- dls-cp : A CarvPath based version of dls for listing all continuous unallocated fragments of a carvpath partition holding a filesystem as a list of unallocated block carvpaths.
- icat-cp : A CarvPath based version of icat that instead of copying out the data of an inode within a carvpath partition holding a filesystem as the carvpath of the file and the carvpath of the file slack.
The carvpaths output by dls-cp can be used as the input of a CarvPath aware carving tool.
- [Open Computer Forensics Architecture]