Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Scalpel doesn't find images that Photorec does? #35

Open
shaun-ba opened this issue Mar 7, 2019 · 1 comment
Open

Scalpel doesn't find images that Photorec does? #35

shaun-ba opened this issue Mar 7, 2019 · 1 comment

Comments

@shaun-ba
Copy link

shaun-ba commented Mar 7, 2019

So, I've done a pass on a drive that found some of my images in photorec.

I made sure the headers of these recovered images were the same as JPG in scalpel's conf, and they were. I also made sure the min:max filesize was more than large enough to cover the image size

Even after this Scalpel cannot find the same images that i've recovered, why is this? It finds some that photorec doesn't, but not the right size, they are all probably thumbnails or caches

@kjoyner12
Copy link

Scalpel does not repair broken headers/EOF markers like PhotoRec in Autopsy. If you use a hex editor to manually repair the recovered files, then you will end up with the same images/files.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants