summaryrefslogtreecommitdiff
path: root/system/scalpel/README
diff options
context:
space:
mode:
Diffstat (limited to 'system/scalpel/README')
-rw-r--r--system/scalpel/README12
1 files changed, 12 insertions, 0 deletions
diff --git a/system/scalpel/README b/system/scalpel/README
new file mode 100644
index 0000000000..c646cfdeaf
--- /dev/null
+++ b/system/scalpel/README
@@ -0,0 +1,12 @@
+Scalpel is a fast file carver that reads a database of header and footer
+definitions and extracts matching files or data fragments from a set of
+image files or raw device files. Scalpel is filesystem-independent and will
+carve files from FATx, NTFS, ext2/3, HFS+, or raw partitions. It is useful
+for both digital forensics investigation and file recovery.
+
+To use it, you MUST have a conf file that defines the file types you want
+to recover. Use the example scalpel.conf file from /usr/doc/scalpel
+
+See the man page for details.
+
+This requires tre available from SlackBuilds.org