slackbuilds_ponce/system/scalpel
Robby Workman 143991a46e Entire Repo: Remove APPROVED field from .info files
This field used to make sense in our pre-git days, but
the Signed-Off-By: line serves the same purpose (and
even more) now, so APPROVED has been rejected.  ;-)

Signed-off-by: Robby Workman <rworkman@slackbuilds.org>
2012-08-14 23:22:50 -05:00
..
README
scalpel.info
scalpel.SlackBuild
slack-desc

Scalpel is a fast file carver that reads a database of header and footer
definitions and extracts matching files or data fragments from a set of
image files or raw device files. Scalpel is filesystem-independent and will
carve files from FATx, NTFS, ext2/3, HFS+, or raw partitions. It is useful
for both digital forensics investigation and file recovery.

To use it, you MUST have a conf file that defines the file types you want
to recover.  Use the example scalpel.conf file from /usr/doc/scalpel

See the man page for details.

This requires tre available from SlackBuilds.org