foremost

Auth/lab ref: file carving from disk images, raw media, and damaged data; headers/footers, recovery workflow, evidence handling.

Independent GitHub snapshot · Automated classification · Original documentation governs