Advanced file carving - SANS Computer Forensics
Advanced file carving - SANS Computer Forensics
Advanced file carving - SANS Computer Forensics
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
File Structure Based Carving<br />
• This technique uses the internal layout of a <strong>file</strong><br />
• Elements are header, footer, identifier strings and size<br />
information<br />
• Known carvers which use this technique are Foremost<br />
and PhotoRec