|
Data Carver Processors: Video |
|
|
|
|
Written by Keven Murphy
|
|
Saturday, 22 August 2009 09:30 |
Video Processor
This script will process any video that mplayer can read. It converts the videos into animated GIF images. * Creates a series of web pages that contains a thumbnail of all readable videos * Gathers details about the files such as Exif data * Can gather whatever data you can think of due to plugins
Note: One of the "side" effects that I have seen reviewing videos with this script is that it can convert some damaged videos into viewable animated GIFs. See INI section for more details.
|
|
Last Updated on Wednesday, 30 December 2009 19:13 |
|
Read more...
|
|
|
Data Carver Processors: PDF |
|
|
|
|
Written by Keven Murphy
|
|
Saturday, 22 August 2009 09:37 |
PDF Processor
This script takes PDF files turns them into animated GIFs. * Creates a series of web pages that contains a thumbnail of all readable PDFs * Gathers details about the files such as Exif data * Can gather whatever data you can think of due to plugins
|
|
Last Updated on Wednesday, 30 December 2009 19:13 |
|
Read more...
|
|
Written by Keven Murphy
|
|
Saturday, 12 September 2009 13:37 |
|
Mitec WRA is a great tool for registry analysis if you can find it on the Internet. The last public version was 1.5.2.0. Look for a file called WRA.zip.
Here are some quick general steps to get it to work on Linux:
- Install Wine. For Fedora just do a yum -y install wine*
- Install cabextract. It can be install via yum for Fedora systems.
- Install IEs4Linux (http://www.tatanka.com.br/ies4linux/page/Main_Page). This sets up IE, which is required for WRA, and sets up a working environment for Wine.
- Setup a bash script with the following:
#!/bin/bash
#Set the path below to reflect where you installed IES4. Take a look at the desktop icon if you are unsure export WINEPREFIX="/home/user/.ies4linux/ie6"
#Set the path to where you have WRA.exe wine "/appl/registry-tools/WRA.exe" |
|
Last Updated on Saturday, 12 September 2009 13:54 |
|
|
Data Carver Processors: Doc |
|
|
|
|
Written by Keven Murphy
|
|
Saturday, 22 August 2009 09:43 |
Doc Processor
Like the others, this script takes anything that OpenOffice can read and turns it into animated GIFs.
- Creates a series of web pages that contain a thumbnail of all readable docs
- Gathers details about the files such as Exif data
- Can gather whatever data you can think of due to plugins
|
|
Last Updated on Wednesday, 30 December 2009 19:12 |
|
Read more...
|
|
SANS SIFT Workstation Version 1.2 Released |
|
|
|
|
SANS just released their SIFT Workstation VMware Appliance. It has been loaded up with all of the forensics tools you could ask for. See the overview below from the SANS Forensics Blog:
SANS SIFT Workstation Overview
- VMware Appliance
- Ready to tackle forensics
- Cross compatibility between Linux and Windows
- Forensic tools preconfigured
- A portable lab workstation you can now use for your investigations
You'll also find some of the tools Keven Murphy has written on the appliance.
Check out the write up on the SANS Forensics Blog at: http://sansforensics.wordpress.com/2008/12/24/happy-holidays-sans-sift-workstation-version-12-released/
Happy Holidays!
|
|
Last Updated on Wednesday, 31 December 2008 12:24 |
|
|
|
|
<< Start < Prev 1 2 Next > End >>
|
|
Page 1 of 2 |