Hi all,
We are currently using a variety of file carving softwares in the office and was wondering if there had been any newcomers to the picture and movie carving game that anyone can recommend?
We are using IEF, C4All, Blade, PhotoRec and occasionally Forensic Explorer.
We find varying results with all products. IEF has this annoying habit of carving live movies but also including the live movie in the export but both movies have different hashes but IEF is the quickest.
C4All is slow but probably the better at carving out of them all.
Anything new out there?
C4All is not a carver in its own right. Are you referring to C4All with Encase/X-Ways/UFED/XRY?
C4All is not a carver in its own right. Are you referring to C4All with Encase/X-Ways/UFED/XRY?
Apologies, within Encase.
Then I strongly recommend adding X-Ways to your list.
In our tests it provided more results than C4All in Encase did.
Also C4All in Encase is very limited in terms of movie files that it will extract.
We did have a trial of X-Ways but at the time found it was quite unstable with regard to carving but that was a while back.
The tool itself is stable but, if you are unsure as to how to use it, it may appear to be unstable.
The tool itself is stable but, if you are unsure as to how to use it, it may appear to be unstable.
Again I wasn’t specific, random crashing and lock ups were the elements that made me describe X Ways as unstable.
Hello.
I recommend you to try RAWUniversal software by 512Byte company - http//
It has an algorithm of file’s searching that consists not just “from-to” and “current size” unlike analogues you use. I think it'd be useful for you.
Also here https://
Hello.
I recommend you to try RAWUniversal software by 512Byte company - http//soft.512byte.ua/products/raw-universal.html
It has an algorithm of file’s searching that consists not just “from-to” and “current size” unlike analogues you use. I think it'd be useful for you.
Also here https://soft.g-ross.com.ua/testing.html you can find testing of the Software.
Thanks, I will take a look.
Not many file types supported yet, and was originally intended for fragmented JPEG recovery
Joep