data-carving

Local-first forensic data recovery for disk images, with explicit evidence boundaries.

You deleted your only copy of an OpenPGP private key file. You wonder if the key material can be recovered via forensic techniques such as file carving. Dodge may be able to help!

A configuration enabling the Scalpel data recovery / data carving tool to work with deleted private key data!

Header-based file extractor/data carving tool

An open-source, free data carving tool for recovering images, videos, and documents from corrupted disks. Designed to be freely used, customized, and improved by the community through collaborative development and contributions.

My fork of Foremost

Custom rules to find missing data

Rough Amiga IFF format dumping tool

Shattered Bytes is an educational digital forensics serious game that puts players in the role of a junior forensic analyst, guiding them through raw binary evidence recovery, fragmented file reconstruction, MBR analysis, anti-forensics challenges, and final incident reporting.

That Fun Time I Made A New OpenPGP Keypair, Got My Public Key Signed By Richard Stallman Himself, Deleted My Only Copy Of The Private Key The Next Day, And Used Crude Forensics Techniques To Recover The Lost Key Material Four Days Later