Tuesday, January 08, 2008

Magic Rescue - File Carving tool

Magic Rescue scans a block device for file types it knows how to recover and calls an external program to extract them. It looks at "magic bytes" in file contents, so it can be used both as an undelete utility and for recovering a corrupted drive or partition. As long as the file data is there, it will find it.

It may have problems on very fragmented filesystems.

3 comments:

Anonymous said...

Had you tested Magic Rescue? Do you know whether the tool recover files whether the file system had been destroyed in the disc image.

cmihai said...

That's pretty much the idea. It works like Foremost, Scalpel or ReviveIT (Revit).

It doesn't bother with the filesystem, it just parses the RAW disk (image) and looks for file magic headers.

If you're lucky enough to find large unfragmented file chucks, you have your file back.

Anonymous said...

It's great.Thank you very much!