Comparing Foremost and Scalpel

Although Scalpel returned more files than Foremost, carry out your own exercise in comparing the carved files found by both Foremost and Scalpel. Unfortunately, the filenames returned by both tools are not the original filenames and in some instances, there may be duplicates of carved files as many files may be fragmented and appear to be separate files. Try manually going through the files found in the output folders of both Foremost and Scalpel and do your own comparative research to see which tool was more successful.

The test image file (11-carve-fat.dd) used in both Foremost and Scalpel contains 15 files of various types, as listed on the download page (http://dftt.sourceforge.net/test11/index.html). This should be useful when doing a comparison of the carved files:

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset