Carve - Revision history

Sam: /* Algorithm */

2024-06-08T14:52:21Z

Algorithm

Sam: /* Description */

2024-02-06T12:37:23Z

Description

Sam at 12:34, 6 February 2024

2024-02-06T12:34:50Z

Sam at 16:54, 25 January 2021

2021-01-25T16:54:41Z

Sam at 16:17, 31 July 2020

2020-07-31T16:17:27Z

Sam: Created page with "{| style="float:right;border:1px solid black" |+ Details | Executable | `Carve.exe` |- | Stage | style="text-align:center;" | 4 |- | Percent Complete | style="text-..."

2020-07-23T10:54:16Z

Created page with "{| style="float:right;border:1px solid black" |+ Details | Executable | <code>Carve.exe</code> |- | Stage | style="text-align:center;" | 4 |- | Percent Complete | style="text-..."

New page

{| style="float:right;border:1px solid black"
|+ Details
| Executable
| <code>Carve.exe</code>
|-
| Stage
| style="text-align:center;" | 4
|-
| Percent Complete
| style="text-align:center;" | 48%
|-
| Message Queue
| <code>carve</code>
|}

This is Truxton's file carver.
Any [[File Types Supported|supported file type]] is searched for in either unallocated space from a drive or file types that are unknown.

@@ Line 30: / Line 30: @@
 # Scanning is done on 512-byte boundaries unless otherwise specified
 # When a file has been found, the length of the file is calculated based on the file's format
-# The file's format is parsed to produce meta-data information (name, dates, etc)
+# The file's format is parsed to produce meta-data information (file name, dates, etc)
 # The file meta data is added to the database
 # File fragments are recorded for use in [[Stitch|fragmented file carving]]

@@ Line 23: / Line 23: @@
 By default, Truxton will break the space to be carved into 10MB chunks and put these chunks onto Carve's queue.
 This allows the space to be carved in parallel by several machines.
 =Algorithm=

@@ Line 15: / Line 15: @@
 This is Truxton's file carver.
-Any [[File Types Supported|supported file type]] is searched for in either unallocated space from a drive or file types that are unknown.
+Any [[File Types Supported|supported file type]] is searched for in either unallocated space from a drive or file types that are [[Type_Unknown|unknown]].
 By default, the carver attempts to identify files on 512 byte sector boundaries but for high value files just as JPGs, it will search every byte in the sector.

← Older revision		Revision as of 16:17, 31 July 2020
Line 16:		Line 16:
	This is Truxton's file carver.		This is Truxton's file carver.
	Any [[File Types Supported\|supported file type]] is searched for in either unallocated space from a drive or file types that are unknown.		Any [[File Types Supported\|supported file type]] is searched for in either unallocated space from a drive or file types that are unknown.
		+
		+	By default, the carver attempts to identify files on 512 byte sector boundaries but for high value files just as JPGs, it will search every byte in the sector.

@@ Line 11: / Line 11: @@
 |-
 | Message Queue
-| <code>carve</code>
+| style="text-align:center;" | <code>carve</code>
 |}