File carving softwa...
 
Notifications
Clear all

File carving software

10 Posts
9 Users
0 Likes
850 Views
(@jfranck)
Posts: 20
Eminent Member
Topic starter
 

I would like to ask what software do you consider a good option for file carving, specially for documents and email files.

As a reference I have been reading this topic Partition Finder in Encase or FTK where R-Studio, X-Ways, FTK and Encase are mentioned.

 
Posted : 09/11/2016 7:11 am
Igor_Michailov
(@igor_michailov)
Posts: 529
Honorable Member
 

Xways is good software for carving.

 
Posted : 09/11/2016 10:53 am
JaredDM
(@jareddm)
Posts: 118
Estimable Member
 

R-Studio is very good too. I especially like that you can create custom XML files to search by your own custom signatures. Very handy when a new type of file comes out and none of the other programs have a signature for it built in yet. I know in data recovery it's a must have tool.

 
Posted : 09/11/2016 11:35 pm
(@jfranck)
Posts: 20
Eminent Member
Topic starter
 

Thanks for the opinions.
Someone else?

 
Posted : 10/11/2016 5:10 pm
minime2k9
(@minime2k9)
Posts: 481
Honorable Member
 

I'll second X-ways.

 
Posted : 10/11/2016 5:58 pm
(@deltron)
Posts: 125
Estimable Member
 

X-ways all the way for carving its a beast

 
Posted : 10/11/2016 9:22 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

This program wasn't listed in the OP, but for file carving I used once scalpel under linux and I never looked back again )

 
Posted : 02/12/2016 2:28 am
(@vasili)
Posts: 7
Active Member
 

FTK and R-studio I have always been pleased with these software!good luck!

 
Posted : 02/12/2016 2:44 am
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
 

Forensic Explorer by GetData has performed very well on file carving from my personal experience.

 
Posted : 02/12/2016 10:07 pm
tracedf
(@tracedf)
Posts: 169
Estimable Member
 

Forensic Explorer by GetData has performed very well on file carving from my personal experience.

Forensic Explorer impressed me a lot; it's very quick.

EnCase works really well and supports a lot of file types but it's pretty slow.

 
Posted : 02/12/2016 11:40 pm
Share: