Naval Postgraduate School
Fall 2008
Wed Oct 22, 2008
File Carving
Tools
Reading
- Detecting File Fragmentation Point Using Sequential Hypothesis Testing. Anandabrata Pal, Husrev Sencar, Nasir Memon, DFRWS 2008. [paper] [slides]
Optional Readings
- In-Place File Carving, Golden G. Richard III, Vassil Roussev, and Lodovico Marziale, IFIP 2007
- Carving contiguous and fragmented files with fast object validation, SL Garfinkel, DFRWS 2007
- Advanced JPEG carving, Michael I. Cohen, Australian Federal Police, Brisbane, Australia, Proceedings of the 1st international conference on Forensic applications and techniques in telecommunications, information, and multimedia and workshop