This preview shows page 1. Sign up to view the full content.
Unformatted text preview: investigation and file recovery. To demonstrate Scalpel, we will run the program inside the Linux operating system using a USB thumb drive as the media that we will attempt to recover the data from. After a set of images is placed on the drive, it will be formatted and a new file system will be made. After this, the dd utility will be used to make an image of the drive. The image will then be inspected using Scalpel and the contents of the data recovered will be shown to the class....
View Full Document
This note was uploaded on 05/07/2008 for the course ISM 4320 taught by Professor Chow during the Spring '08 term at FAU.
- Spring '08