SmartCarving™

Digital media is a hostile environment for a forensic investigator. Idiosyncrasies in file systems, operating system abstractions, application and user activities can make recovering and interpreting photo evidence a laborious process. Adroit Photo Forensics uses the most advanced and most actively developed carver in the industry. SmartCarving™ takes the pain out of collecting photo evidence from a disk image.

Recent studies have shown 15%—20% of photos stored can be fragmented. Fragmentation can be even higher on highly active areas such as browser and application cache. Adroit's SmartCarving™ engine can successfully recover fragmented photos.

Disk Image Formats

Adroit's SmartCarving™ engine supports the following disk image types, raw stream, DD format, Encase Format, Smart Format.

Any File System

SmartCarver works with most popular file systems. In file system agnostic mode it can still recover photos whether a file system is corrupted or not.
→ Explicit support for:
     — FAT (12/16/32)
     — NTFS (all versions)
     — HFS & HFS+
→ Unsupported file systems are carved in file system agnostic mode.
→ Automatic detection of corrupted file systems (still carved!)
→ Automatic detection of disk formatting

Photo Formats

SmartCarver™ can recover and validate a growing list of image file formats. Adroit Photo Forensics currently support carving and validation of following popular photo formats:
→ JPEG
→ PNG
→ Canon RAW CRW
→ Canon RAW CR2
→ Nikon RAW NEF
→ Sony Raw (ARW)
→ Olympus Raw (ORF)