Computer Forensics Tools & Techniques Catalog

Searching for forensic tools and techniques by functionality


Find all File Carving tools and techniques    Refine by search parameters
Forensic Functionality:File Carving
Description:Searching for and reconstructing files based on content, rather than file system metadata. See http://www.forensicswiki.org/wiki/File_Carving, "The Evolution of File Carving" http://digital-assembly.com/technology/research/pubs/ieee-spm-2009.pdf Pal and Memon and "Carving contiguous and fragmented files with fast object validation" dfrws.org/2007/proceedings/p2-garfinkel.pdf Garfinkel for more information.
Technical Parameters: Tool host OS / runtime environment: Supported file types: Custom file types: Carving boundaries: Supported file carving methods: File viewer/file preview: