Difference between revisions of "Scalpel"
(Added info about Scalpel, a faster alternative to Foremost) |
|||
| Line 2: | Line 2: | ||
|Name=Scalpel | |Name=Scalpel | ||
|Short description=Forensic data recovery forked from Foremost with better performance. | |Short description=Forensic data recovery forked from Foremost with better performance. | ||
| − | |Full description=Scalpel is a file carving and indexing application that runs on Linux | + | |Full description=Scalpel is a file carving and indexing application that runs on GNU/Linux |
and Windows. The first version of Scalpel, released in 2005, was | and Windows. The first version of Scalpel, released in 2005, was | ||
based on Foremost 0.69. There have been a number of internal releases | based on Foremost 0.69. There have been a number of internal releases | ||
Latest revision as of 16:32, 24 June 2022
Scalpel
https://github.com/sleuthkit/scalpel
Forensic data recovery forked from Foremost with better performance.
Scalpel is a file carving and indexing application that runs on GNU/Linux and Windows. The first version of Scalpel, released in 2005, was based on Foremost 0.69. There have been a number of internal releases since the last public release, 1.60, primarily to support our own research. The newest public release v2.0, has a number of additional features, including:
o minimum carve sizes.
o multithreading for quicker execution on multicore CPUs.
o asynchronous I/O that allows disk operations to overlap with pattern matching--this results in a substantial performance improvement.
o regular expression support for headers/footers.
o embedded header/footer matching for better processing of structured file types that may contain embedded files.
o for advanced users, support for massively-threaded execution on Graphics Processing Units (GPUs).
Licensing
License
Verified by
Verified on
Notes
License
Leaders and contributors
Resources and communication
Software prerequisites
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.3 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included in the page “GNU Free Documentation License”.
The copyright and license notices on this page only apply to the text on this page. Any software or copyright-licenses or other similar notices described in this text has its own copyright notice and license, which can usually be found in the distribution or license text itself.