Forensic Focus - Mobile Phone Forensics - interesting software for phone file carving

Posted: Wed Feb 22, 2012 4:55 am
Author: nocomp Location: france
hi everybody,
i just came across a small utility called phone image carver from getdata wich retrive all sorts of filetype from a raw image.
just tried it on a raw of an iphone, very interesting.
You can download a free version wich has limitation on saving files, but at least it gives you an overview.
I would like to have comments from experts here, see if it s worth keeping in in the tool box Smile

best regards
herve

Re: interesting software for phone file carving

Posted: Wed Feb 22, 2012 6:37 am
Author: Doug Location: UK
Personally I favour Blade and Scalpel.

www.digitalforensicsso...m/Scalpel/
Scalpel is free, run in the command line, lightweight and very customisable!

www.bladeforensics.com/
More automated and has a nice GUI, also its customisable!

Re: interesting software for phone file carving

Posted: Wed Feb 22, 2012 7:22 am
Author: nocomp Location: france
thxx doug, didn t knew the blade software, i gonna give it a try.
you said you prefer scalpel, what made you choose this one, compare to testdisk or foremost ?
best regards
herve

Re: interesting software for phone file carving

Posted: Wed Feb 22, 2012 9:56 am
Author: AlexC Location: UK
The new version of scalpel (2.0) has had big improvements (multi-thread support, regex file definitions).

If you want a GUI based carving tool, I don't think Blade can be touched, and from their recent press release they've been working hard to add a load of new features.

Re: interesting software for phone file carving

Posted: Tue Mar 27, 2012 5:56 pm
Author: randomaccess Location: Australia

- nocomp

thxx doug, didn t knew the blade software, i gonna give it a try.
you said you prefer scalpel, what made you choose this one, compare to testdisk or foremost ?
best regards
herve

my understanding is that scalpel was based off foremost

Re: interesting software for phone file carving

Posted: Tue Mar 27, 2012 11:01 pm
Author: sideshow018 Location: Canada
PIC is an awsome tool but there are others, for more advanced users, try the Adroit software from Polytech NYU research department; file juicer; R-Studio; C4P - C4M; Enscripts in Encase; Physical tools found in Cellebrite Physical ANlayzer and XRY Complete.....just some ideas for you to run iwth....

Re: interesting software for phone file carving

Posted: Wed Mar 28, 2012 6:12 pm
Author: douglasbrush Location: New York, NY
Just did a BlackBerry with FTK Imager and carved .e01 with Adroit - very good success rates. PhotRec is another good (and free) tool for carving.

All times are GMT - 6 Hours
Page 1 of 1
http://www.forensicfocus.com/