We are happy to announce the release of the next version of the Scalpel file carver, version 2.0 - the first public release in almost five years. There are a slew of performance enhancements and new features, focusing on improved carving accuracy and performance, and even more goodness is on the way.
Just some of the new features include:
- Support for TRE-based regular expressions for headers and footers
- Support for minimum carve sizes for recovered files
- Parallel architecture to take full advantage of multicore processors
- Beta support for NVIDIA CUDA-based GPU acceleration of header / footer searches
- An asynchronous IO architecture for significantly faster IO throughput
- Support for 32 and 64-bit Linux, Windows XP, Vista and 7, and OSX
Check back with us in the coming weeks for some ways to put these new features to good use, as well as for the introduction of some even newer functionality.
The new version can be downloaded from:
The download file contains pre-compiled Windows binaries as well as the project source code. If you find any bugs while using Scalpel please send an email to scalpel@digitalforensicssolutions.com. If you want to send comments to the authors, you can contact Golden Richard (golden@cs.uno.edu / @nolaforensix ) or Lodovico Marziale ( vico@digdeeply.com / http://www.linkedin.com/in/lodovicomarziale ).
If you are interested in the GPU research that went into this project, we published a paper at DFRWS that discusses both the CUDA architecture as well as the integration of it into Scalpel. It can be found here.
Congratulations! This is a great move forward. Have you incorporated the new code from foremost so that we can merge these projects back together?
ReplyDeleteThis is a very informative article. I am glad to have discovered your blog. I will definitely promote this blog among my circle of friends.
ReplyDeleteThanks,
Network Support DC