Re: [sleuthkit-users] Photorec carver

[Brian C. <ca...@sl...>]

Right now, we use the default PhotoRec settings and just give a 'search' command. If there are any photorec gurus out there that want to suggest more fancy arguments, then let us know.




On Feb 17, 2015, at 2:16 PM, Ketil Froyn <ke...@fr...> wrote:

> Is it possible to get the photorec carver module to look at every byte and not just sector aligned offsets?
> 
> I have played a bit with the photorec application, but I haven't managed to find a way to make it work for cases where I'm looking for data that doesn't start at a sector. I tried setting sector size to 1 byte, but it either refused or crashed, don't remember which.
> 
> Regards, Ketil
> 
> On 17 Feb 2015 16:51, "Brian Carrier" <ca...@sl...> wrote:
> Hi Alan,
> 
> It will be part of the next release (which will be either end of this week or early next week).
> 
> brian
> 
> On Feb 17, 2015, at 4:29 AM, Alan Browne <ala...@gm...> wrote:
> 
> > Hi all
> >
> > I was looking at the the available modules written for autopsy and I have noticed the code for photorec carver module. I have noticed that in the presentation given by Richard Cordovano in python autopsy that the photorec carving module is compiled and installed into autopsy (screen shot attached).
> > Unfortunately my knowledge of java and netbeans is limited to say the least so I am unable to compile the module from source to test it.
> >
> > Is the photorec module working?
> > Is the compiled version of photorec carver available to me?
> > Or is it possible for someone to walk me through on how I can compile the module from source.
> >
> > Regards
> >
> > Alan
> > ------------------------------------------------------------------------------
> > Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> > from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> > with Interactivity, Sharing, Native Excel Exports, App Integration & more
> > Get technology previously reserved for billion-dollar corporations, FREE
> > http://pubads.g.doubleclick.net/gampad/clk?id=190641631&iu=/4140/ostg.clktrk_______________________________________________
> > sleuthkit-users mailing list
> > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> > http://www.sleuthkit.org
> 
> 
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
> http://pubads.g.doubleclick.net/gampad/clk?id=190641631&iu=/4140/ostg.clktrk
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
> http://pubads.g.doubleclick.net/gampad/clk?id=190641631&iu=/4140/ostg.clktrk_______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org