File carving softwa...
 
Notifications
Clear all

File carving software

10 Posts
9 Users
0 Reactions
2,563 Views
(@jfranck)
Eminent Member
Joined: 10 years ago
Posts: 20
Topic starter   [#14804]

I would like to ask what software do you consider a good option for file carving, specially for documents and email files.

As a reference I have been reading this topic Partition Finder in Encase or FTK where R-Studio, X-Ways, FTK and Encase are mentioned.



   
Quote
Igor_Michailov
(@igor_michailov)
Honorable Member
Joined: 21 years ago
Posts: 529
 

Xways is good software for carving.



   
ReplyQuote
JaredDM
(@jareddm)
Estimable Member
Joined: 10 years ago
Posts: 118
 

R-Studio is very good too. I especially like that you can create custom XML files to search by your own custom signatures. Very handy when a new type of file comes out and none of the other programs have a signature for it built in yet. I know in data recovery it's a must have tool.



   
ReplyQuote
(@jfranck)
Eminent Member
Joined: 10 years ago
Posts: 20
Topic starter  

Thanks for the opinions.
Someone else?



   
ReplyQuote
minime2k9
(@minime2k9)
Honorable Member
Joined: 15 years ago
Posts: 481
 

I'll second X-ways.



   
ReplyQuote
(@deltron)
Estimable Member
Joined: 12 years ago
Posts: 125
 

X-ways all the way for carving its a beast



   
ReplyQuote
passcodeunlock
(@passcodeunlock)
Prominent Member
Joined: 10 years ago
Posts: 792
 

This program wasn't listed in the OP, but for file carving I used once scalpel under linux and I never looked back again )



   
ReplyQuote
(@vasili)
Active Member
Joined: 11 years ago
Posts: 7
 

FTK and R-studio I have always been pleased with these software!good luck!



   
ReplyQuote
UnallocatedClusters
(@unallocatedclusters)
Honorable Member
Joined: 14 years ago
Posts: 576
 

Forensic Explorer by GetData has performed very well on file carving from my personal experience.



   
ReplyQuote
tracedf
(@tracedf)
Estimable Member
Joined: 11 years ago
Posts: 169
 

Forensic Explorer by GetData has performed very well on file carving from my personal experience.

Forensic Explorer impressed me a lot; it's very quick.

EnCase works really well and supports a lot of file types but it's pretty slow.



   
ReplyQuote
Share: