Scalpel 2.0 released

Scalpel is a fast file carver that reads a database of header and footer definitions and extracts matching files or data fragments from a set of image files or raw device files. Scalpel is filesystem-independent and will carve files from FATx, NTFS, ext2/3, HFS+, or raw partitions. It is useful for both digital forensics investigation and file recovery.

features include:

  •  Support for TRE-based regular expressions for headers and footers
  • Support for minimum carve sizes for recovered files
  • Parallel architecture to take full advantage of multicore processors
  • Beta support for NVIDIA CUDA-based GPU acceleration of header / footer searches
  • An asynchronous IO architecture for significantly faster IO throughput
  • Support for 32 and 64-bit Linux, Windows XP, Vista and 7, and OSX

If you are interested in the GPU research that went into this project, we published a paper at DFRWS that discusses both the CUDA architecture as well as the integration of it into Scalpel. It can be found here.

Download Current Version : http://www.digitalforensicssolutions.com
Advertisements

4 Comments

  1. That client men and women simply were standing at this time there in a series as well as the contestant possessed a listing of work from which to choose one particular at this time.

  2. Very interesting subject , appreciate it for putting up.

  3. That is very intriguing, You might be an excessively professional blogger. I’ve joined your feed and stay up for searching for more of your great post. Also, I’ve shared your website in my social networks!

  4. Good article thank you!


Sorry, the comment form is closed at this time.

Comments RSS