[Gllug] Linux hard drive forensic tools

[Benjamin Donnachie]

On 23 Jan 2012, at 19:19, Christian Smith
<csmith at thewrongchristian.org.uk> wrote:

>> Any chance with Linux/FOSS
>> forensic tools? If so, which are recommended for this
>> particular task?
> Not tried it in anger, only used it to check if anything was
> loaded onto a "new" SDCard I got, but try:
> http://foremost.sourceforge.net/

I recommend Scalpel, http://www.digitalforensicssolutions.com/Scalpel/

It is multi-threaded and fast, unlike foremost, and I have used it in
anger with good results.

Ben
--
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug