scalpel
fast filesystem-independent file recovery
Install
- All systems
-
curl cmd.cat/scalpel.sh
- Debian
-
apt-get install scalpel
- Ubuntu
-
apt-get install scalpel
- Kali Linux
-
apt-get install scalpel
- Fedora
-
dnf install scalpel
- Windows (WSL2)
-
sudo apt-get update
sudo apt-get install scalpel
- Raspbian
-
apt-get install scalpel
- Dockerfile
- dockerfile.run/scalpel
scalpel
fast filesystem-independent file recovery
scalpel is a fast file carver that reads a database of header and footer definitions and extracts matching files from a set of image files or raw device files. scalpel is filesystem-independent and will carve files from FAT16, FAT32, exFAT, NTFS, Ext2, Ext3, Ext4, JFS, XFS, ReiserFS, raw partitions, etc. scalpel is a complete rewrite of the Foremost 0.69 file carver and is useful for both digital forensics investigations and file recovery.