Difference between revisions of "Zero storage carving"

From Forensics Wiki
Jump to: navigation, search
 
(2 intermediate revisions by one user not shown)
Line 7: Line 7:
 
* [[tsk-cp]]
 
* [[tsk-cp]]
 
* [[scalpel]]
 
* [[scalpel]]
* [[Photorec]]
+
* [[PhotoRec]]
 
* [[CarvFs]]
 
* [[CarvFs]]
 
* [[LibCarvPath]]
 
* [[LibCarvPath]]
* [[Ocfa Treegraph API]]
+
* [[OCFA treegraph API]]

Latest revision as of 05:17, 28 August 2009

Zero storage carving is the concept of using techniques to enable doing carving of meaningfull and processable chunks or files of uncompressed unencoded data on disks, disk-images or container files without the need for additional storage to be allocated for copies of the relevant data chunks or files. Zero storage carving is sometimes also referred to as in-line carving.

Tools with support or facilities for zero storage carving include: