Description:
File Carving, or sometimes simply Carving, is the practice of searching an input for files or other kinds of objects based on content, rather than on metadata. File carving is a powerful tool for recovering files and fragments of files when directory entries are corrupt or missing, as may be the case with old files that have been deleted or when performing an analysis on damaged media. Memory carving is a useful tool for analyzing physical and virtual memory dumps when the memory structures are unknown or have been overwritten.
Trenton Ivey (kno) from
HackYeah.com submitted this video to us showing a file carving demo. According to his post to us - "In this episode I take a look at how to pull out ,jpg files from the middle of seemingly meaningless data. The .img file that is used, as well as a commented version of the code is avaliable at HackYeah.com. This is a two part video, so make sure you don't miss the next one.".
You can download the tool and other files
from his website. Thanks go out to Trenton for referring this video to us.
Tags: tools ,
Disclaimer: We are a infosec video aggregator and this video is linked from an external website. The original author may be different from the user re-posting/linking it here. Please do not assume the authors to be same without verifying.
Comments: