Data Carving Concepts

by Antonio Merola
Sept. 1, 2017 0 comments SANS Institute forensics

This paper is the technical report required to obtain the GIAC Gold for Forensics Analysis (GCFA) security certification. From GIAC website: “The GIAC Gold option for certification is assurance that a certified individual understands and can communicate the knowledge and skills necessary in key areas of information security. GIAC Gold is distinguished from the existing exam-only 'GIAC Silver' certification by requiring candidates to complete a technical report covering an important area of security related to the certification the student is seeking.” The idea behind this paper is to help people become familiar with data carving concepts and analysis techniques.

https://www.sans.org/reading-room/whitepapers/forensics/data-carving-concepts-32969