<div class="description">
<p>Disc carving is an essential element of computer forensic analysis. However the high cost of commercial solutions coupled with the lack of availability of open source tools to perform disc analysis has become a hindrance to those performing analysis on UNIX computers. In addition even expensive commercial products offer only a fairly limited ability to \"carve\" for various files. In this thesis, an open source tool known as Foremost is modified in such a way as to address the need for such a carving tool in a UNIX environment. An implementation of various heuristics for recognizing file formats will be demonstrated as well as the ability to provide some file system specific support. As a result of these implementations a revision of Foremost will be provided that will be made available as an open source tool to aid analysts in their forensic investigations.
</p>
<br>Subjects: Computer crimes; Investigation; United States; Computer science; Actions and defenses; Records; Management; Computer forensics; Disk carving; Data carving</div>
<div class="fn value">
Mikus, Nicholas A.</div>
Internet Archive identifier