[Gllug] Linux hard drive forensic tools

Benjamin Donnachie benjamin at py-soft.co.uk
Mon Jan 23 18:34:41 UTC 2012

On 23 Jan 2012, at 19:19, Christian Smith
<csmith at thewrongchristian.org.uk> wrote:

>> Any chance with Linux/FOSS
>> forensic tools? If so, which are recommended for this
>> particular task?
> Not tried it in anger, only used it to check if anything was
> loaded onto a "new" SDCard I got, but try:
> http://foremost.sourceforge.net/

I recommend Scalpel, http://www.digitalforensicssolutions.com/Scalpel/

It is multi-threaded and fast, unlike foremost, and I have used it in
anger with good results.

Gllug mailing list  -  Gllug at gllug.org.uk

More information about the GLLUG mailing list