Carv

Suitable for new or experienced investigators, Forensic Explorer combines a flexible and easy to use GUI with advanced sort, filter, keyword search, data recovery and script technology. Quickly process large volumes of data, automate complex investigation tasks, produce detailed reports and increase productivity. Access all areas of physical or imaged media at a file, text, or hex level. View and analyze system files, file and disk slack, swap files, print files, boot records, partitions, file allocation tables, unallocated clusters, etc. Inbuilt data carving tool to carve more than 300 known file types. Sort and multiple sort files by attribute, including, extension, signature, hash, path and created, accessed and modified dates. Navigate a disk and its structure via a graphical view. Zoom in and out to graphically map disk usage. Access and analyze data at a text or hexadecimal. Automatically decode values with the data inspector.

Carve Data Recovery is a Windows utility for recovering files from deleted, formatted, lost, or damaged volumes. It scans FAT12, FAT16, FAT32, exFAT, and NTFS, and can reconstruct partitions and directory structures when partition records or boot sectors are missing or damaged. When directory entries are unavailable, content-based carving identifies supported formats and determines file boundaries. The software previews files, creates byte-for-byte disk images, and reads SMART drive-health attributes. It supports 512-byte and native 4Kn sectors, USB drives, memory cards, and disk images. Users can recover documents, photos, media, archives, and supported CAD and 3D files, saving recovered data to a separate destination. Scanning and previewing are free; the free edition limits recovered files to 1 MB each, with paid perpetual licenses for individual computers, small teams, and sites.