Please accept the attached file as my submission for the DFRWS 2006 file carving challenge.
Ê
Find attached a zip file containing six files :-
Ê
1)ÊÊÊ DEB_viewer.exe - application developed to demonstrate basic Digital Evidence Bag Handling/Viewing
2)ÊÊÊ Main.pas - Delphi 7 source code for DEB_viewer - this contains the code for DEB handling
3)ÊÊÊ FileView.pas - Delphi 7 source code for DEB_viewer - this contains the code for file carving funcionality
4)ÊÊÊ AAAReadmefirst.txt - basic instruction about what the DEB_Viewer does and how to drive it.
5)ÊÊÊ AAAmemostatus.txt - sample output generated by DEB_Viewer in memostatus window. This shows a list of file headers andÊposition found for the DFRWS challenge sample data. At the bottom of this file are the full component details of the zip archive files found in the sample data.
6)ÊÊÊ AAAmemoindex - list of all files carved by the DEB_Viewer application, this include file start sector, file type, and length.

Ê