"Kali Linux - Foremost example"

Published: Fri 14 July 2017

In content.

Foremost is a forensic tool used to recover lost files based on:

  • headers
  • footers
  • internal data structures

Foremost can work with DD image type as well.

Link: http://foremost.sourceforge.net

Example command:

foremost -t pdf,exe -i (/path/to/recover|image.dd)

Source:https://tools.kali.org/forensics/foremost

social