Basic Data Carving Test #1 (Brian Carrier)


CTFs & Images

Test Images
  • General
  • Small media (USB, CD, etc..)
This test image is a FAT32 file system and is intended to test data carving tools and their ability to extract various file formats. The image contains several allocated and deleted files and the header one JPEG file was modified ( to show the importance of ignoring corrupted files). All files are random files that that were in my possession or that I created from scratch. This image was created from a USB thumb-drive that was wiped and formatted using the mkfs.vfat program. The FAT boot sector has been corrupted so that the image cannot be mounted and therefore data carving methods must be used to extract the files.