foremost / scalpel

File-carving from disk images / raw blobs (forensics).

$ sudo foremost -i image.dd -o carved/
$ sudo foremost -t jpg,pdf -i image.dd -o out/
$ sudo scalpel -c /etc/scalpel/scalpel.conf -o out/ image.dd