±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36232
New Yesterday: 4 Visitors: 144

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

How do i Extract a jpg from an unallocated directory

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

jaclaz
Senior Member
 

Re: How do i Extract a jpg from an unallocated directory

Post Posted: Jun 14, 18 08:39

- etiennem
Oeps - I didn't check the URL.
I use Garry Kessler website to extract all kinds of files in the dd image. The search can also be done in a hexviewer.
Searching for the footer or trailer is even not necessary; just select a large part and add the appropriate footer at the end of the file.
www.garykessler.net/li..._sigs.html


Yep, that is a very good source for this info Smile .

Usually hex viewers/editors are usually slowish when searching, a tool that is suitable and works just fine/fast is gsar (in Windows):
tjaberg.com/
though unfortunately it has some limitations with the offsets, so it is a problem going through largish disk images becuase addresses "wrap" around.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 

Page 2 of 2
Page Previous  1, 2