Recovering deleted files with Scalpel
Conclusions
Scalpel cannot replace a backup, but it can come to the rescue in many cases. Do not expect miracles, however; fragmented files or physical storage faults make it difficult to detect file ends and push Scalpel to its limits. In this case, the "rescued" files will often prove to be useless.
Infos
- Scalpel: http://dfsforensics.blogspot.com/2011/04/announcing-scalpel-20.html
- Scalpel download: http://www.digitalforensicssolutions.com/Scalpel/
- Regular expressions: http://en.wikipedia.org/wiki/Regular_expression
« Previous 1 2
Buy this article as PDF
Express-Checkout as PDF
Price $2.95
(incl. VAT)
(incl. VAT)