BreadCrumb review
A free, forensic-style recovery tool for carving files and undeleting supported filesystems.
Reviewed by iTechGuides Editors · Editorial team · Updated Sep 2026
BreadCrumb is an open-source Python recovery and digital-forensics tool for people who need to scan disk images or block devices. It combines signature-based carving from raw bytes with filesystem undelete, so it can address both recovery without filesystem metadata and recovery from supported filesystems. It runs on Linux, macOS, and Windows, and its optional Flask-based web interface offers an alternative to using the tool without that interface.
BreadCrumb’s breadth is a notable fit for forensic-style work: it can scan raw and split raw images, EWF/E01, QCOW2, and VMDK, as well as block devices. Filesystem undelete covers NTFS, ext2/3/4, FAT/exFAT, HFS+/HFSX, and APFS; the published description also includes BitLocker volume decryption during recovery. File validation can identify failed carves, with optional removal, and reporting options include JSON, CSV, HTML, and Sleuth Kit bodyfile formats. That combination gives users multiple ways to inspect and document results without making the product solely a filesystem undelete utility.
BreadCrumb is free and open source, which may suit users comfortable choosing and operating a technical recovery tool. Its scope is not a fit for every recovery job: RAID recovery, bootable media, and pre-recovery file preview are not advertised. Choose it for supported device and image formats, raw-byte carving, and filesystem undelete; consider another tool if RAID recovery, bootable recovery media, or preview before recovery is central to the task.
BreadCrumb pros and cons
- Where it wins
- Carves files from raw bytes without filesystem metadata
- Undeletes across NTFS, ext, FAT/exFAT, HFS+, and APFS
- Reads multiple disk-image formats and exports reports
- Where it doesn't
- No RAID recovery is listed
- No bootable media is advertised
- Pre-recovery file preview is not advertised
BreadCrumb fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update