How it works...

Belkasoft Evidence Center parses memory image structure and extracts available data, putting it into corresponding categories. The BelkaCarving options allow the tool to reconstruct fragmented data, for example, images.