3. Foremost

Description:
Foremost is a file recovery tool used to extract files based on their headers, footers, and internal data structures. It can recover files from disk images and is commonly used in digital forensics.

Examples:

• 1. Recover Files:
     • foremost -i disk_image.dd -o output_directory

Explanation: Recovers files from the disk image (disk_image.dd) and stores them in the specified output directory.