Fast file carver working on disk images
https://github.com/sleuthkit/scalpel
Scalpel is a fast file carver that reads a database of header and footer
definitions and extracts matching files from a set of image files or raw
device files. Scalpel is independent on used file-system and will carve
files from FATx, NTFS, ext2/3, or raw partitions. It is useful for both
digital forensics investigation and file recovery.
Version: 2.1
General Commands | |
| scalpel | Recover files or data fragments from a disk image using file type-specific patterns |