Debian logoDebian Screenshots >

magicrescue

recovers files by looking for magic bytes

Description

Magic Rescue scans a block device for file types it knows how to recover and calls an external program to extract them. It looks at "magic bytes" in file contents, so it can be used both as an undelete utility and for recovering a corrupted drive or partition. As long as the file data is there, it will find it.

Magic Rescue uses files called 'recipes'. These files have strings and commands to identify and extract data from devices or forensics images. So, you can write your own recipes. Currently, there are these recipes:

   * avi
   * canon-cr2
   * elf
   * flac
   * gimp-xcf
   * gpl
   * gzip
   * jpeg-exif
   * jpeg-jfif
   * mbox
   * mbox-mozilla-inbox
   * mbox-mozilla-sent
   * mp3-id3v1
   * mp3-id3v2
   * msoffice
   * nikon-raw
   * perl
   * png
   * ppm
   * sqlite
   * zip

This program is useful in forensics investigations.

Homepage

http://www.itu.dk/people/jobr/magicrescue


Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.