drop a raw disk image or binary · carve files based on internal structure consistency rather than just magic bytes · find jpeg-shaped regions by dct statistics · sqlite-shaped regions by btree structure · pe-shaped regions by section validity · finds files that header-based carvers miss · runs locally
disk / binary
drop image or blob
or click
large files processed in 4MB chunks · JPEG SOS/EOI · SQLite btree pages · PE sections
drop raw image or binary · streamed semantic scan