Search Results for "linux file parser"

Partclone is a project like the well-known backup utility "Partition Image" a.k.a partimage. Partclone provide utilities to back up used blocks and design for higher compatibility of the file system using supported library like e2fslibs.

A patch to the GNU dd program, this version has several features intended for forensic acquisition of data. Highlights include hashing on-the-fly, split output files, pattern writing, a progress meter, and file verification. Latest base version available : https://sourceforge.net/projects/dc3dd/files/dc3dd/7.3.1/ This version works on modern versions of Linux, as well other UNIX like operating systems. Alternatively, this version for Windows : https://sourceforge.net/projects/dc3dd/files/dc3dd/7.2.646/ Grab it with Cygwin 2.5, Cygwin terminal or the bare DLLS.

rmw (ReMove to Waste) is a safe-remove utility for the command line. Its goal is to conform to the FreeDesktop.org Trash specification and therefore be compatible with KDE, GNOME, XFCE, and others. Desktop integration is optional however, and by default, rmw will only use a waste folder separated from your desktop trash. One of its unique features is the ability to purge files from your Waste/Trash directories after x number of days.

A tool to verify and/or recover as much data as possible from failed disks. When a sector can not be read it will be filled with zeroes and diskrescue continues. The resulting disk/file can be checked with fsck and analyzed with dumpfs and fsdb.

Command-line tool for identifying and uncompressing a wide array of archive formats. It aims to unlock old and hard-to-find archive types.

"Forensic File Carving Tools" is a set of tools one can use to carve arbitrary memory dumps for recovering files.