- Home
- Data recovery software
- BreadCrumb
On the recordRead 12 Oct 202630 facts
BreadCrumb
On the record
- BitLocker
- It can read supported BitLocker volumes using a recovery key, password, startup key file, or raw FVEK, with decryption described as read-only.github.com · read 12 Oct 2026
- Carving limits
- Signature carving recovers intact files only when they are contiguous and does not restore original filenames or timestamps.github.com · read 12 Oct 2026
- Credential handling
- The security policy warns that BitLocker credentials passed on the command line may appear in shell history and process lists, and says worker processes receive credentials through an environment variable not written to disk.github.com · read 12 Oct 2026
- Filesystem undelete
- Its filesystem-aware modes support NTFS, ext2/3/4, FAT12/16/32, exFAT, HFS+/HFSX, and APFS.github.com · read 12 Oct 2026
- File types
- The README lists signatures for formats including JPEG, PNG, PDF, ZIP, SQLite, MP4, Outlook stores, Windows event logs, and Apple binary plists.github.com · read 12 Oct 2026
- Image support
- The README says disk images can be raw, split raw, EWF/E01, QCOW2, or VMDK, with formats detected automatically.github.com · read 12 Oct 2026
- Input formats
- It auto-detects raw and split images, EWF/E01, QCOW2, and VMDK disk images.github.com · read 12 Oct 2026
- Installation
- The project can be installed with pip or run as a Python module and requires Python 3.10 or later.github.com · read 12 Oct 2026
- Integrations
- The README documents Sleuth Kit bodyfile output and JSON-lines events for wrapping in a GUI or pipeline.github.com · read 12 Oct 2026
- Intended users
- The repository describes BreadCrumb as a forensic file carver and tags it for data recovery and digital forensics and incident response.github.com · read 12 Oct 2026
- License
- The repository includes an MIT License granting permission to use, copy, modify, distribute, and sell copies of the software subject to its conditions.github.com · read 12 Oct 2026
- Maintenance status
- The security policy describes the project as pre-1.0 and says only the latest main branch receives security fixes.github.com · read 12 Oct 2026
- Memory card recovery
- Yesgithub.com · read 19 Sep 2026
- Operating systems
- The project says it runs on Linux, macOS, and Windows, including raw device access.github.com · read 12 Oct 2026
- Optional dependencies
- Pillow, libewf-python, and pyahocorasick are optional extras for image validation and JPEG bifragment recovery, broader EWF support, and faster matching with large signature sets.github.com · read 12 Oct 2026
- Operating systems
- Linux,macOS,Windowsgithub.com · read 19 Sep 2026
- Other recovery limits
- The README says TRIMmed SSD blocks read as zeros and that LUKS and FileVault volumes must already be unlocked.github.com · read 12 Oct 2026
- Platform support
- The README says BreadCrumb runs on Linux, macOS, and Windows, including raw device access.github.com · read 12 Oct 2026
