Editing Foremost
Jump to navigation
Jump to search
Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.
The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.
Latest revision | Your text | ||
Line 1: | Line 1: | ||
− | {{ | + | {{Infobox_tool |
− | |purpose=Foremost is a console program to recover files based on their headers, footers, and internal data structures. | + | |purpose= Foremost is a console program to recover files based on their headers, footers, and internal data structures. |
− | |homepage=http://foremost.sourceforge.net/ | + | |image= |
− | | | + | |homepage= http://foremost.sourceforge.net/ |
− | + | |license= | |
− | + | |platforms= | |
− | | | ||
}} | }} | ||
+ | |||
+ | <!-- Delete the Categories that do not apply --> | ||
+ | [[Category:File Recovery]] | ||
+ | [[Category:Forensic]] | ||
+ | |||
+ | |||
= Description = | = Description = | ||
Foremost is a console program to recover files based on their headers, footers, and internal data structures. This process is commonly referred to as data carving. Foremost can work on image files, such as those generated by dd, Safeback, Encase, etc, or directly on a drive. The headers and footers can be specified by a configuration file or you can use command line switches to specify built-in file types. These built-in types look at the data structures of a given file format allowing for a more reliable and faster recovery. | Foremost is a console program to recover files based on their headers, footers, and internal data structures. This process is commonly referred to as data carving. Foremost can work on image files, such as those generated by dd, Safeback, Encase, etc, or directly on a drive. The headers and footers can be specified by a configuration file or you can use command line switches to specify built-in file types. These built-in types look at the data structures of a given file format allowing for a more reliable and faster recovery. |