Android Data Recovery Techniques - Practical Mobile Forensics - page 306

The scalpel configuration file
This file needs to be modified in order to mention the files that are related to
Android. A sample scalpel.conf file can be downloaded from the link ht-
tps://viaforensics.com/resources/tools/#android . You can also uncomment the
files and save the conf file to select file types of your choice. Once this is done,
replace the original conf file with the one that is downloaded.
3. Scalpel needs to be run along with the preceding configuration file on the dd im-
age being examined. You can run the tool using the command shown in the fol-
lowing screenshot, by inputting the configuration file and the dd file. Once the
command is run, the tool starts to carve the files and build them accordingly.