diff options
| author | klaatu <klaatu@member.fsf.org> | 2012-06-30 12:33:47 -0400 |
|---|---|---|
| committer | dsomero <xgizzmo@slackbuilds.org> | 2012-06-30 12:33:47 -0400 |
| commit | aab432b661f3af5f3b047993b339b0195f77d950 (patch) | |
| tree | 4ad7836d8288f0e79ce9e81f07cc4de0617eec74 /system/scalpel/README | |
| parent | 3de9b740d266d841a0ad84c57a4f98dcf35b4781 (diff) | |
| download | slackbuilds-aab432b661f3af5f3b047993b339b0195f77d950.tar.gz | |
system/scalpel: Added (A Frugal, High Performance File Carver)
Signed-off-by: dsomero <xgizzmo@slackbuilds.org>
Diffstat (limited to 'system/scalpel/README')
| -rw-r--r-- | system/scalpel/README | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/system/scalpel/README b/system/scalpel/README new file mode 100644 index 0000000000..c646cfdeaf --- /dev/null +++ b/system/scalpel/README @@ -0,0 +1,12 @@ +Scalpel is a fast file carver that reads a database of header and footer +definitions and extracts matching files or data fragments from a set of +image files or raw device files. Scalpel is filesystem-independent and will +carve files from FATx, NTFS, ext2/3, HFS+, or raw partitions. It is useful +for both digital forensics investigation and file recovery. + +To use it, you MUST have a conf file that defines the file types you want +to recover. Use the example scalpel.conf file from /usr/doc/scalpel + +See the man page for details. + +This requires tre available from SlackBuilds.org |