You’ll need the following tools installed: Let’s take for example at the time of writing this post I am looking to extract a single schema out of one such mysqldump –all-database file of around 2GB (2GB of course isn’t large however it’s large enough to give a practical example the methods for larger files are of course the same). The TL DR of “what is file carving” is taking a target blob of data (often a multi GB / TB file) and reducing it in to targeted pieces of data, this could be for instance grabbing all the jpeg images in a packet capture / mysqldump or pulling that single table/schema out of a huge mysqldump with –all-databases (if you’re not using mydumper you really should it avoids issues like this!) aka “Sorting the wheat from the chaff”.
#010 editor carve out files full
So what is file carving? despite the terminology it’s not going to be a full roast dinner unless you have an appetite for data which as you’re here I’m assuming you have. A lot of old memories were brought to the front as it were the one I’m going to cover in this blog post is: file carving.
This is a long overdue blog post from London’s 44con Cyber Security conference back in September.
0 kommentar(er)
