Hey i’m looking for 2 modules that i can’t seem to find. First one is something that can extract embeded files in an already known file (Multiple JPG’s in the same jpg file) I have a case here that there are a multiple images that are 5+ times the size they should be so i’d like photorec carver or embedded file extractor but for known files not just unallocated. Finally an image/video repair module that uses already found headers and attempts to repair corrupted files using them (I know this one is a long shot and pretty complex). Thanks
I wrote a python module that carves jpgs, pngs, bmps and gifs that are embedded in files such as sqlite databases, docs and data stream files by default. But if you run it on all files rather than on the default settings then it should be able to extract jpgs that are embedded in another jpg file. It uses foremost carving tool and carves based on file headers and footers. Hope it will help.
The module can be found on GitHub
That’s great thanks alot i’ll give it a try now
Sorry just one question, where do the files go (i’m pretty new to autopsy). The carved folder is already at 700k files so it’s all abit of a mess atm. EDIT: Never mind i just restarted it and i see now thanks