iRecover was developed to aid forensics investigators by combining other commonly used command-line forensics tools into a simple graphical user interface.
iRecover provides a GUI interface using the Perl/Tk programming library for forensics examiners to use when retrieving deleted files from an image/ file partition under forensic investigation. Investigators can use this tool to selectively retrieve only certain kinds of files (text, images, video, audio, documents, etc.) for a quick overview of information or for recovery using the "icat" Sleuth Kit tool to actually go into the image and select the files of interest to display.
Be the first to post a review of iRecover - File Recovery Tool!