macOS
brew install foremostlocal Homebrew formula metadata
sudo port install foremostMacPorts ports tree · sysutils/foremost/Portfile · ソース: api.github.com
brew
foremost のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。
インストール
brew install foremostlocal Homebrew formula metadata
sudo port install foremostMacPorts ports tree · sysutils/foremost/Portfile · ソース: api.github.com
sudo apt install foremostDebian stable package indexes · foremost · ソース: deb.debian.org
sudo dnf install foremostFedora Rawhide package metadata · foremost · ソース: dl.fedoraproject.org
nix profile install nixpkgs#foremostnixpkgs package indexes · pkgs/by-name/fo/foremost/package.nix · ソース: api.github.com
sudo pacman -S foremostArch Linux sync databases · foremost · ソース: geo.mirror.pkgbuild.com
概要
Console program to recover files based on their headers and footers
履歴
Foremost is a console data-carving utility for recovering files from disk images, raw drives, and forensic images by matching file headers, footers, and internal structures.
The upstream site says Foremost was originally developed by the United States Air Force Office of Special Investigations and the Center for Information Systems Security Studies and Research, then opened to the general public.
The bundled README credits Special Agents Kris Kendall and Jesse Kornblum of the USAF Office of Special Investigations, starting in March 2001, and says the project was inspired by CarvThis from the Defense Computer Forensic Lab.
Foremost's adoption is tied to digital forensics workflows rather than a single language ecosystem. The official site advertises use on images from tools such as dd, Safeback, and EnCase, and links to DFRWS challenge material and sample carving test images.
It is packaged broadly across Unix package managers because it is a small C command-line tool with a stable forensic niche: file recovery by signatures without depending on a full forensic suite.
Foremost can scan a disk image or drive directly, write recovered files to an output directory, and use built-in file-type detectors or a configuration file that defines extensions, case sensitivity, maximum size, headers, and optional footers.
If no configuration file is specified, the manual says Foremost first checks foremost.conf in the current directory and then /etc/foremost.conf.
Foremost is a classic package-manager utility: small, scriptable, old, and still useful because it implements one forensic primitive well.
Its configuration-file format is significant for package users because distributions can ship a system-wide foremost.conf while investigators can keep case-specific signatures beside evidence images.
セキュリティ状態
narrow executable package without higher-risk signals.
リスク グリーン · 信頼度 低 · appliance
エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
./foremost.conf/etc/foremost.conf実行可能ファイル
| コマンド | 種類 | 公開範囲 | メモ |
|---|---|---|---|
foremost | cli | グローバル実行可能ファイル |
鮮度
これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。
https://foremost.sourceforge.net/
インストールメタデータ
| パッケージキー | brew:foremost |
|---|---|
| バージョン | 1.5.7 |
| パッケージマネージャ | Homebrew |
| パッケージマネージャページ | https://formulae.brew.sh/formula/foremost |
| ホームページ | https://foremost.sourceforge.net/ |
| 上流ドキュメント | https://foremost.sourceforge.net/ |
| ライセンス | LicenseRef-Homebrew-public-domain |
| ソースアーカイブ | https://foremost.sourceforge.net/pkg/foremost-1.5.7.tar.gz |
| Bottle | 利用可能 (対象 arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | 未定義 |
| サービス | 宣言なし |
レジストリ情報
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | foremost |
| Version Scheme | 0 |
| Revision | 1 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
ソースデータベース一致
一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。
foremost 1.5.7-11+b2
forensic program to recover lost files
https://sourceforge.net/projects/foremost/
sudo apt install foremostforemost
nix profile install nixpkgs#foremostforemost 1.5.7-11
forensic program to recover lost files
https://sourceforge.net/projects/foremost/
sudo apt install foremostforemost 1.5.7-37.fc44
Recover files by "carving" them from a raw disk
sudo dnf install foremostforemost 1.5.7-7
A console program to recover files based on their headers, footers, and internal data structures
http://foremost.sourceforge.net/
sudo pacman -S foremostforemost
sudo port install foremostソース経路
このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。
View the package source record on GitHub.