Abstract:
Parallelized File Carving accelerates data reconstruction from hard disk images. Hard disk drives´ capacity increases steadily, however the access speed does not accelerate in the same way. This master thesis targets at a new architecture for parallel analysis of forensic images. This architecture will be defined and implemented. The time needed for analyzing an image will be decreased. Using a plugin system, it is easy to add support for new file types. This thesis includes a technical motivation regarding file carving and the use of file carving in this thesis. Additionally, there are manuals for users and developers. Finally, future improvements and related work are presented.
Screenshot:
