IMAGE 1 - CANON2 (FAT32) This directory contans multiple images of a 32MB SD card shot in a Canon PowerShot SD800IS: filename size SHA1 ============================================================================ nps-2009-canon2-gen1.raw 31129600 67364b0894a0465d6ada8c4966b6bbcaf7039082 nps-2009-canon2-gen2.raw 31129600 0e3cdef3b1a7d3762f9704bfd4349033fe808eda nps-2009-canon2-gen3.raw 31129600 7dc8be7f3993c37f101c0ed0fec4274abccacf3c nps-2009-canon2-gen4.raw 31129600 ed1c7dea94096ad309b32037cb6d43a291952d8d nps-2009-canon2-gen5.raw 31129600 63e7f9daf8dbcd1744579e579f3f0fddebe2ee90 nps-2009-canon2-gen6.raw 31129600 4742c325f10583dab1eb4c55d0d45ab3beb99eb3 The images were made by placing an SD card into the camera, taking photos, removing the card, erasing select photos, imaging the card, and then repeating the process. Some of the JPEGs are fragmented, some are not. Some are resident in the file system, some are deleted but recoverable, and several have data present but no longer have any file system metadata and can only be recovered through carving. Of these carvable JPEGs at least two are fragmented. Each JPEG is a photo of a screen or a piece of paper with prominent text: IMG_0001.JPG -- "1" IMG_0002.JPG -- "2" IMG_0003.JPG -- "3" IMG_0004.JPG -- "4" IMG_0005.JPG -- "5" IMG_0006.JPG -- "6" IMG_0007.JPG -- "7" IMG_0008.JPG -- "8" IMG_0009.JPG -- "9" IMG_0010.JPG -- "10" IMG_0011.JPG -- "11" IMG_0012.JPG -- "12" IMG_0013.JPG -- "13" IMG_0014.JPG -- "14" IMG_0015.JPG -- "15" IMG_0016.JPG -- "16" IMG_0017.JPG -- "17" IMG_0018.JPG -- "18" IMG_0019.JPG -- "19" IMG_0020.JPG -- "20" IMG_0021.JPG -- "21" IMG_0022.JPG -- "22" IMG_0023.JPG -- "23" IMG_0024.JPG -- "24" IMG_0025.JPG -- "25" IMG_0026.JPG -- "26" IMG_0027.JPG -- "27" IMG_0028.JPG -- "28" IMG_0029.JPG -- "29" IMG_0030.JPG -- "30" IMG_0031.JPG -- "31" IMG_0032.JPG -- "32" IMG_0033.JPG -- "33" IMG_0034.JPG -- "34" IMG_0035.JPG -- "35" IMG_0036.JPG -- "36" IMG_0037.JPG -- "G2-1" IMG_0038.JPG -- "G2-2" (3 fragments) IMG_0039.JPG -- "G2-3" IMG_0040.JPG -- "G2-4" IMG_0041.JPG -- "G3-1" IMG_0042.JPG -- "G4-1" IMG_0043.JPG -- "G5-1" (4 fragments) IMG_0044.JPG -- "G6-1" (3 fragments) IMG_0045.JPG -- "G6-2" IMG_0046.JPG -- "G6-3" IMG_0047.JPG -- "G6-4" IMG_0048.JPG -- "G6-5" (2 fragments) IMG_0049.JPG -- "G6-6" IMG_0050.JPG -- "G6-7" IMG_0051.JPG -- "G6-8" Other files in this directory: narrative.txt this file files-gen6.zip JPEGs that can be recovered from nps-2009-canon2-gen6.raw