Gabriele Caracciolo Blog

• Autopsy “[...] The Autopsy Forensic Browser is a graphical interface to the command line digital investigation tools in The Sleuth Kit [...]“
• Sleuthkit “[...] is a library and collection of command line tools that allow you to investigate volume and file system data”
• Foremost (for data carving)
• sha256deep command (to compute file hash)
• grep command (to search keywords)
• awk command (to analyse the output)
• sed command (to analyse the output)
• dd command

Other Data Carving Tools

• Selective File Dumper All in one application, “This is an Open Source free computer forensics useful tool written in Bash Script for Linux systems [...]” [ENG]
• Selective File Dumper [ITA]