GRESHAM, ORE - A new software tool will help law enforcement quickly identify inappropriate or illegal computer graphics files in ambient data storage areas of computer hard disk drives.
The tool, the Graphics File Extractor (GFE), developed by New Technologies Inc., Automatically reconstructs exact replicas of deleted files, which pass CRC hashing tests. The new tool can be used to automatically evaluate SafeBack files; files created by unallocated file space and Windows swap files. When used with Firehand Ember software, this tool is supposed to make life easier for law enforcement.
Other similar file carving tools have been around for years but this tool, according to New Technologies, reconstructs the exact file contents and size when such data still is resident and contiguous on the storage device.