Back
Carving a file from a disk image

Labs need a computer

Open this page on a computer, or make the browser window larger.

Files

  • forensics-carve.zip

    Size: 8.8 KB

    SHA-256

    b572289ffe3cc4e951bff4fe0ef6cd0f15a82c6f0e92cd7de8b4834ee90c9daa

    Download

After downloading, compare the file SHA-256 with the value shown here to make sure it arrived intact.

Tools you may need

  • binwalk

    To detect and carve embedded files.

  • foremost

    To carve files by signature.

Format: HTF{...}