Package: foremost (1.5.6-1)

Forensics application to recover data

This is a console program to recover files based on their headers and footers for forensics purposes.

Foremost can work on disk image files, such as those generated by dd, Safeback, Encase, etc, or directly on a drive. The headers and footers are specified by a configuration file, so you can pick and choose which headers you want to look for.

Tags: System Administration: Forensics and Recovery, Data Recovery, Hardware Enablement: Storage, User Interface: Command Line, Role: Program, Scope: Utility, Security: Forensics, Purpose: Scanning