sepinf-inc / IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
Other
893 stars 214 forks source link

Carver for .torrent files and resume.dat #1985

Closed wladimirleite closed 5 months ago

wladimirleite commented 8 months ago

While working in a real case, I found no evidence among the active files, but I was able to find crucial information using a custom "external carver" for torrent files and the control file used by BitTorrent clients ("resume.dat"). It would be good to be able to carve these files during IPED processing.