Difference between revisions of "Carve Options"
Jump to navigation
Jump to search
(Created page with "Truxton has several options for [https://en.wikipedia.org/wiki/File_carving carving] files. This information is also kept in the <code>RelationType</code> database table. {|...") |
|||
| Line 1: | Line 1: | ||
Truxton has several options for [https://en.wikipedia.org/wiki/File_carving carving] files. | Truxton has several options for [https://en.wikipedia.org/wiki/File_carving carving] files. | ||
| − | |||
| − | |||
{| class="wikitable" | {| class="wikitable" | ||
Latest revision as of 11:20, 3 December 2020
Truxton has several options for carving files.
| Name | Value | Meaning |
|---|---|---|
CARVE_OPTIONS_USE_META_DATA_FOR_FILE_INFORMATION
|
1 | Get file name and dates from data inside the file format. |
CARVE_OPTIONS_XOR
|
2 | Exclusive-or the contents before scanning. |
CARVE_OPTIONS_CARVING_FROM_LOGICAL_FILE
|
4 | Tells the carver that a file is being carved and not unstructured space. |
CARVE_OPTIONS_EXHAUSTIVE
|
8 | Perform the scan on a byte boundary and not block boundary. |
CARVE_OPTIONS_MINIMAL
|
16 | Scan only on a block boundary. |
CARVE_OPTIONS_NORMAL
|
32 | Scan on a block boundary for all file types but search on a byte boundary for high value files. |
