Scalpel - Project Proposal

Scalpel - Project Proposal - investigation and file...

Info iconThis preview shows page 1. Sign up to view the full content.

View Full Document Right Arrow Icon
ISM4324 PROJECT PROPOSAL Our team has selected an open source data carving application, Scalpel . Although Scalpel is a multi-platform application, the preferred platform for using Scalpel is Linux which is the OS we will demonstrate its capabilities. Scalpel is a fast file carver that reads a database of header and footer definitions and extracts matching files from a set of image files or raw device files. Scalpel is file system-independent and will carve files from FATx, NTFS, ext2/3, or raw partitions. It is useful for both digital forensics
Background image of page 1
This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: investigation and file recovery. To demonstrate Scalpel, we will run the program inside the Linux operating system using a USB thumb drive as the media that we will attempt to recover the data from. After a set of images is placed on the drive, it will be formatted and a new file system will be made. After this, the dd utility will be used to make an image of the drive. The image will then be inspected using Scalpel and the contents of the data recovered will be shown to the class....
View Full Document

This note was uploaded on 05/07/2008 for the course ISM 4320 taught by Professor Chow during the Spring '08 term at FAU.

Ask a homework question - tutors are online