Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
5
Posts
5
Users
0
Reactions
1,255
Views
Topic starter
21/04/2010 8:23 am
Is there any software available in the market that can extract fragmented images from memory dump?
21/04/2010 3:12 pm
Try
21/04/2010 11:54 pm
I've also had some success using Volatility's to dump a particular process's memdmp, then using scalpel to carve the resulting file.
22/04/2010 12:44 am
Yea, photorec or foremost. Both are great, in my experience foremost recovers a bit more though.
23/04/2010 8:25 pm
Hallo
I am a big fan of Digital Detective's Blade tool and hightly recommend it
It is really powerful and very fast. It is very easy to use and configure. I use it in my work every day.
It also had image validation so is really good for pictures.