CAINE - 06 - QPhotorec - file carver data recovery tool, GUI for PhotoRec
CAINE Forensics series - 06 - QPhotorec - file carver data recovery tool, GUI for PhotoRec
♥️ SUBSCRIBE for more videos: https://www.youtube.com/bluemonkey4n6...
This course was designed to provide information on how to use the tools on the CAINE forensics distro to accomplish tasks in the basic steps in digital forensics: Preservation of evidence (write blocking), extraction of data (imaging), Analysis, and Reporting. This course covers the tools that allow users to acquire data (logical and physical), forensically analyze data, hashing datasets, perform malware analysis, memory forensics, mobile forensics, network forensics, open source intelligence (OSINT), and timeline analysis.
This video will look at the QPhotoRec data recovery tool included in the CAINE 12 distro. We will cover using QPhotoRec, created by Christophe Grenier, to recover data from images of deleted and re-formatted file systems.
Video timeline
00:00 intro
00:11 PhotoRec
00:57 QPhotoRec
01:30 example 1 - SD Card with in camera deleted photos
07:49 example 2 - SD Card re-formatted in camera
10:12 example 3 - 2006 DFRWS Forensic Challenge image
11:37 BONUS - Custom Carver
16:24 recap
⭕️ For other videos about the CAINE forensics distro, see other videos in this series: • CAINE forensics tutorials
Linux distro:
CAINE linux (https://www.caine-live.net). Using CAINE v12 beta
Virtualization software:
Virtual Box (http://virtualbox.org)
PhotoRec - written and maintained by Christophe Grenier ([email protected])
Icons made by freepik from @flaticon http://www.flaticon.com/authors/freepik
Icons made by Smashicons from http://www.flaticon.com/authors/smash...
Image for 3rd example: 2006 DFRWS forensics challenge (https://old.dfrws.org/2006/challenge)