File Carving Techniques Using Scalpel

Abstract

-File carving is an important technique in
digital forensics. File carvers can retrieve files from raw
disk by using database of headers and footers. Scalpel is
one of the best forensics tool in Kali Linux. Scalpel was
created as an improvement of Foremost 0.69. Earlier
versions of Foremost have some issue when it gets some
heavy CPU jobs, Scalpel overcomes it. Scalpel can easily
recover permanently deleted data. This paper presents
the step-by-step process of implementation and file
carving using Scalpel.