[Gllug] Linux hard drive forensic tools
benjamin at py-soft.co.uk
Mon Jan 23 18:34:41 UTC 2012
On 23 Jan 2012, at 19:19, Christian Smith
<csmith at thewrongchristian.org.uk> wrote:
>> Any chance with Linux/FOSS
>> forensic tools? If so, which are recommended for this
>> particular task?
> Not tried it in anger, only used it to check if anything was
> loaded onto a "new" SDCard I got, but try:
I recommend Scalpel, http://www.digitalforensicssolutions.com/Scalpel/
It is multi-threaded and fast, unlike foremost, and I have used it in
anger with good results.
Gllug mailing list - Gllug at gllug.org.uk
More information about the GLLUG