BreadCrumb
The facts below are what the maker publishes about BreadCrumb, checked and dated. Our editors have not written about it yet.
The facts
Each one read from BreadCrumb's own pages, with the date it was checked.
What it does
- BitLocker
- It can read supported BitLocker volumes using a recovery key, password, startup key file, or raw FVEK, with decryption described as read-only.checked 12 Oct 2026
- Carving limits
- Signature carving recovers intact files only when they are contiguous and does not restore original filenames or timestamps.checked 12 Oct 2026
- Credential handling
- The security policy warns that BitLocker credentials passed on the command line may appear in shell history and process lists, and says worker processes receive credentials through an environment variable not written to disk.checked 12 Oct 2026
- Filesystem undelete
- Its filesystem-aware modes support NTFS, ext2/3/4, FAT12/16/32, exFAT, HFS+/HFSX, and APFS.checked 12 Oct 2026
- File types
- The README lists signatures for formats including JPEG, PNG, PDF, ZIP, SQLite, MP4, Outlook stores, Windows event logs, and Apple binary plists.checked 12 Oct 2026
- Image support
- The README says disk images can be raw, split raw, EWF/E01, QCOW2, or VMDK, with formats detected automatically.checked 12 Oct 2026
- Input formats
- It auto-detects raw and split images, EWF/E01, QCOW2, and VMDK disk images.checked 12 Oct 2026
- Installation
- The project can be installed with pip or run as a Python module and requires Python 3.10 or later.checked 12 Oct 2026
- Integrations
- The README documents Sleuth Kit bodyfile output and JSON-lines events for wrapping in a GUI or pipeline.checked 12 Oct 2026
- Intended users
- The repository describes BreadCrumb as a forensic file carver and tags it for data recovery and digital forensics and incident response.checked 12 Oct 2026
- License
- The repository includes an MIT License granting permission to use, copy, modify, distribute, and sell copies of the software subject to its conditions.checked 12 Oct 2026
- Maintenance status
- The security policy describes the project as pre-1.0 and says only the latest main branch receives security fixes.checked 12 Oct 2026
- Memory card recovery
- Yeschecked 19 Sep 2026
- Operating systems
- The project says it runs on Linux, macOS, and Windows, including raw device access.checked 12 Oct 2026
- Optional dependencies
- Pillow, libewf-python, and pyahocorasick are optional extras for image validation and JPEG bifragment recovery, broader EWF support, and faster matching with large signature sets.checked 12 Oct 2026
- Other recovery limits
- The README says TRIMmed SSD blocks read as zeros and that LUKS and FileVault volumes must already be unlocked.checked 12 Oct 2026
- Purpose
- BreadCrumb scans disk images and block devices for deleted files by signature, including on formatted, corrupted, or unknown filesystems.checked 12 Oct 2026
- Recovery limits
- The README says carving reliably recovers only contiguous files and does not restore original filenames or timestamps; TRIMmed SSD blocks read as zeros cannot be recovered.checked 12 Oct 2026
- Recovery sources
- Block devices; raw and split disk images; EWF/E01; QCOW2; VMDK; NTFS; ext2/3/4; FAT12/16/32; exFAT; HFS+/HFSX; APFSchecked 19 Sep 2026
- Reporting
- The tool can write a JSON manifest and optionally export CSV, Sleuth Kit bodyfiles, HTML reports, and MACB timelines.checked 12 Oct 2026
- Reports
- It can produce a JSON manifest, optional CSV and Sleuth Kit bodyfile exports, HTML reports, and deletion timelines.checked 12 Oct 2026
- Runtime
- The command-line tool uses Python 3.10+ and the standard library; Pillow, libewf-python, pyahocorasick, and cryptography are optional extras for specific capabilities.checked 12 Oct 2026
Money
- Free plan
- Yeschecked 19 Sep 2026
Where it runs
- Platform support
- The README says BreadCrumb runs on Linux, macOS, and Windows, including raw device access.checked 12 Oct 2026
Alternatives to BreadCrumb
- 1
EaseUS Data Recovery Wizard
Free planAndroidiOSmacOSWindows9.0Free plan - 2
Disk Drill
Free planmacOSWindows8.4From $89 a year - 3
MiniTool Power Data Recovery
Free planmacOSWindows8.2From $89 a year - 4
DoYourData Recovery
Free planiOSmacOSWindows8.2From $69 a year - 5
AOMEI FastRecovery
Free planWindows8.1Free plan - 6
Hetman Partition Recovery
LinuxmacOSWindows7.9$97.95 one-time