Carve Options

From truxwiki.com
Jump to navigation Jump to search

Truxton has several options for carving files.

Name Value Meaning
CARVE_OPTIONS_USE_META_DATA_FOR_FILE_INFORMATION 1 Get file name and dates from data inside the file format.
CARVE_OPTIONS_XOR 2 Exclusive-or the contents before scanning.
CARVE_OPTIONS_CARVING_FROM_LOGICAL_FILE 4 Tells the carver that a file is being carved and not unstructured space.
CARVE_OPTIONS_EXHAUSTIVE 8 Perform the scan on a byte boundary and not block boundary.
CARVE_OPTIONS_MINIMAL 16 Scan only on a block boundary.
CARVE_OPTIONS_NORMAL 32 Scan on a block boundary for all file types but search on a byte boundary for high value files.