foremost.8

forensic program to recover lost files

Install

All systems
curl cmd.cat/foremost.8.sh
Debian Debian
apt-get install foremost
Ubuntu
apt-get install foremost
Arch Arch Linux
pacman -S foremost
image/svg+xml Kali Linux
apt-get install foremost
Fedora
dnf install foremost
Windows (WSL2)
sudo apt-get update sudo apt-get install foremost
OS X
brew install foremost
Raspbian
apt-get install foremost
Dockerfile
dockerfile.run/foremost.8

foremost

forensic program to recover lost files

Foremost is a forensic program to recover lost files based on their headers, footers, and internal data structures. Foremost can work on image files, such as those generated by dd, Safeback, Encase, etc, or directly on a drive. The headers and footers can be specified by a configuration file or you can use command line switches to specify built-in file types. These built-in types look at the data structures of a given file format allowing for a more reliable and faster recovery.