FTK Computer Forensics: Custom File Carving








Customize data carving to recover file and file fragments that would otherwise be unrecoverable. This video will show you how to define a header, footer, maximum file size and a byte offset for a length value within the file being carved. It’s very easy to use and requires no scripting. For example, an FTK computer forensics examiner had to recover GPS tracks rom a Garmin GPS device. He crafted a custom carver and recovered several GPS tracks in just 5 minutes.


Leave a Reply


Powered by Yahoo! Answers