Viewing results of Scalpel

Now we can head over to the output folder named ScalpelOutput to have a look at the carved files:

The results of the Scalpel output are similar to that of Foremost, with both output folders containing various subfolders with carved files along with an audit.txt file with details of the findings:

Within the jpg-1-o folder, we can see five .jpg files, three with actual images:

Even though Scalpel's results showed that five files with .jpg headers and footers were identified in the carve list when the tool was run, some of these may not open. These files are most likely false positives:

The following screenshot shows a snippet of the audit.txt file, displaying information about the carved files:

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset