File carving softwa...
 
Notifications
Clear all

File carving software

10 Posts
9 Users
0 Reactions
1,826 Views
(@jfranck)
Eminent Member
Joined: 9 years ago
Posts: 20
Topic starter  

I would like to ask what software do you consider a good option for file carving, specially for documents and email files.

As a reference I have been reading this topic Partition Finder in Encase or FTK where R-Studio, X-Ways, FTK and Encase are mentioned.


   
Quote
Igor_Michailov
(@igor_michailov)
Honorable Member
Joined: 20 years ago
Posts: 529
 

Xways is good software for carving.


   
ReplyQuote
JaredDM
(@jareddm)
Estimable Member
Joined: 9 years ago
Posts: 118
 

R-Studio is very good too. I especially like that you can create custom XML files to search by your own custom signatures. Very handy when a new type of file comes out and none of the other programs have a signature for it built in yet. I know in data recovery it's a must have tool.


   
ReplyQuote
(@jfranck)
Eminent Member
Joined: 9 years ago
Posts: 20
Topic starter  

Thanks for the opinions.
Someone else?


   
ReplyQuote
minime2k9
(@minime2k9)
Honorable Member
Joined: 14 years ago
Posts: 481
 

I'll second X-ways.


   
ReplyQuote
(@deltron)
Estimable Member
Joined: 11 years ago
Posts: 125
 

X-ways all the way for carving its a beast


   
ReplyQuote
passcodeunlock
(@passcodeunlock)
Prominent Member
Joined: 9 years ago
Posts: 792
 

This program wasn't listed in the OP, but for file carving I used once scalpel under linux and I never looked back again )


   
ReplyQuote
(@vasili)
Active Member
Joined: 10 years ago
Posts: 7
 

FTK and R-studio I have always been pleased with these software!good luck!


   
ReplyQuote
UnallocatedClusters
(@unallocatedclusters)
Honorable Member
Joined: 13 years ago
Posts: 576
 

Forensic Explorer by GetData has performed very well on file carving from my personal experience.


   
ReplyQuote
tracedf
(@tracedf)
Estimable Member
Joined: 10 years ago
Posts: 169
 

Forensic Explorer by GetData has performed very well on file carving from my personal experience.

Forensic Explorer impressed me a lot; it's very quick.

EnCase works really well and supports a lot of file types but it's pretty slow.


   
ReplyQuote
Share: