Home Software RecuperaBit: A Tool for Forensic File System Reconstruction

RecuperaBit: A Tool for Forensic File System Reconstruction

0
0
1,759

RecuperaBit is a piece of  software which attempts to reconstruct file system structures and recover files. Currently it supports only NTFS.

RecuperaBit attempts reconstruction of the directory structure regardless of:

  • missing partition table
  • unknown partition boundaries
  • partially-overwritten metadata
  • quick format

You can get more information about the reconstruction algorithms and the architecture used in RecuperaBit by reading this MSc thesis or checking out the slides.

  • Spotting the Signs of Lateral Movement

    Derek King has published another post as part of his¬†“Hunting with Splunk: The Basic…
  • How to Deploy Cuckoo Sandbox

    Marc Rivero L√≥pez presented a how-to guide that will help you to deploy¬†Cuckoo Sandbox …
  • DFIR SQL Query Repository

    Alexis Brignoni has started a collection of¬†SQL query templates for digital forensics use,…
Load More Related Articles
Load More In Software

Leave a Reply

Your email address will not be published. Required fields are marked *