Embedded MultiMediaCard (eMMC) chips are located in many devices, such as gaming consoles, IoT, mobile phones, and smart TVs. Imaging and extracting data from these devices can often be challenging. Traditional storage devices (such as hard drives and USBs) can easily be mounted locally on a machine before being imaged….
scalpel
File carving is a useful technique if the file system is not recognized. In certain cases, the imaged device might just contain a large chunk of data; rather than something structured, such as a FAT16 USB. Uncommon file systems may also not be supported by traditional forensics tools. Therefore, file…