Notifications
Clear all

File carvers

10 Posts
4 Users
0 Likes
1,034 Views
zhaan
(@zhaan)
Posts: 50
Trusted Member
Topic starter
 

Hi all,

We are currently using a variety of file carving softwares in the office and was wondering if there had been any newcomers to the picture and movie carving game that anyone can recommend?

We are using IEF, C4All, Blade, PhotoRec and occasionally Forensic Explorer.

We find varying results with all products. IEF has this annoying habit of carving live movies but also including the live movie in the export but both movies have different hashes but IEF is the quickest.

C4All is slow but probably the better at carving out of them all.

Anything new out there?

 
Posted : 22/02/2018 11:12 am
minime2k9
(@minime2k9)
Posts: 481
Honorable Member
 

C4All is not a carver in its own right. Are you referring to C4All with Encase/X-Ways/UFED/XRY?

 
Posted : 22/02/2018 11:41 am
zhaan
(@zhaan)
Posts: 50
Trusted Member
Topic starter
 

C4All is not a carver in its own right. Are you referring to C4All with Encase/X-Ways/UFED/XRY?

Apologies, within Encase.

 
Posted : 22/02/2018 11:43 am
minime2k9
(@minime2k9)
Posts: 481
Honorable Member
 

Then I strongly recommend adding X-Ways to your list.
In our tests it provided more results than C4All in Encase did.
Also C4All in Encase is very limited in terms of movie files that it will extract.

 
Posted : 22/02/2018 3:48 pm
zhaan
(@zhaan)
Posts: 50
Trusted Member
Topic starter
 

We did have a trial of X-Ways but at the time found it was quite unstable with regard to carving but that was a while back.

 
Posted : 22/02/2018 3:50 pm
minime2k9
(@minime2k9)
Posts: 481
Honorable Member
 

The tool itself is stable but, if you are unsure as to how to use it, it may appear to be unstable.

 
Posted : 23/02/2018 7:01 am
zhaan
(@zhaan)
Posts: 50
Trusted Member
Topic starter
 

The tool itself is stable but, if you are unsure as to how to use it, it may appear to be unstable.

Again I wasn’t specific, random crashing and lock ups were the elements that made me describe X Ways as unstable.

 
Posted : 23/02/2018 7:31 am
tito
 tito
(@tito)
Posts: 24
Eminent Member
 

Hello.
I recommend you to try RAWUniversal software by 512Byte company - http//soft.512byte.ua/products/raw-universal.html
It has an algorithm of file’s searching that consists not just “from-to” and “current size” unlike analogues you use. I think it'd be useful for you.
Also here https://soft.g-ross.com.ua/testing.html you can find testing of the Software.

 
Posted : 23/02/2018 12:23 pm
zhaan
(@zhaan)
Posts: 50
Trusted Member
Topic starter
 

Hello.
I recommend you to try RAWUniversal software by 512Byte company - http//soft.512byte.ua/products/raw-universal.html
It has an algorithm of file’s searching that consists not just “from-to” and “current size” unlike analogues you use. I think it'd be useful for you.
Also here https://soft.g-ross.com.ua/testing.html you can find testing of the Software.

Thanks, I will take a look.

 
Posted : 23/02/2018 12:24 pm
(@disktuna)
Posts: 11
Active Member
 

Not many file types supported yet, and was originally intended for fragmented JPEG recovery JPEG Recovery LAB.

Joep

 
Posted : 02/03/2018 9:30 am
Share: