autopsy
autopsy copied to clipboard
Adding CR3 carving
Hi,
Can you adding CR3 Canon file signature for Carving?
Instructions for adding custom file signatures to photo rec which is what Autopsy uses for file carving can be found here https://sleuthkit.org/autopsy/docs/user-docs/4.21.0/photorec_carver_page.html#:~:text=To%20add%20custom%20file%20signatures,only%20the%20specified%20types%22%20option.
Instructions for adding custom file signatures to photo rec which is what Autopsy uses for file carving can be found here https://sleuthkit.org/autopsy/docs/user-docs/4.21.0/photorec_carver_page.html#:~:text=To%20add%20custom%20file%20signatures,only%20the%20specified%20types%22%20option.
CR3 is more complex by:
https://github.com/WojciechMula/recovercr3/blob/master/recovercr3.py