Home

For investigation, automatic data carving is obviously the quickest method, but at times it is necessary to perform manual operations to obgtain the best results.  Typical occasions where automatic carving has significant problems is when a certain type of file has been fragmented, and there are many more similar files of the same type.  A good example might be an Excel or Word file which all have key pointers to recognise file sections, but it is very easy to accidently match fragments from multiple files by mistake.

The manual carving system allows for viewing and working with clusters, a file can be built up, or edited.

The options is part of the Forensic option only.  To edit a file, the log must be displayed and the Verify Column clicked on.  The Data carving option box will be displayed.