Logo
Welcome to the Frontpage
Data Carver Processors: Video PDF Print E-mail
Written by Keven Murphy   
Saturday, 22 August 2009 09:30

Video Processor

This script will process any video that mplayer can read. It converts the videos into animated GIF images.
* Creates a series of web pages that contains a thumbnail of all readable videos
* Gathers details about the files such as Exif data
* Can gather whatever data you can think of due to plugins

Note: One of the "side" effects that I have seen reviewing videos with this script is that it can convert some damaged videos into viewable animated GIFs. See INI section for more details.

Last Updated on Wednesday, 30 December 2009 19:13
Read more...
 
Data Carver Processors: PDF PDF Print E-mail
Written by Keven Murphy   
Saturday, 22 August 2009 09:37

PDF Processor

This script takes PDF files turns them into animated GIFs.
* Creates a series of web pages that contains a thumbnail of all readable PDFs
* Gathers details about the files such as Exif data
* Can gather whatever data you can think of due to plugins

Last Updated on Wednesday, 30 December 2009 19:13
Read more...
 
Mitec WRA and Linux PDF Print E-mail
Written by Keven Murphy   
Saturday, 12 September 2009 13:37

Mitec WRA is a great tool for registry analysis if you can find it on the Internet. The last public version was 1.5.2.0. Look for a file called WRA.zip.

Here are some quick general steps to get it to work on Linux:

  1. Install Wine. For Fedora just do a yum -y install wine*
  2. Install cabextract. It can be install via yum for Fedora systems.
  3. Install IEs4Linux (http://www.tatanka.com.br/ies4linux/page/Main_Page). This sets up IE, which is required for WRA, and sets up a working environment for Wine.
  4. Setup a bash script with the following:

#!/bin/bash

#Set the path below to reflect where you installed IES4. Take a look at the desktop icon if you are unsure
export WINEPREFIX="/home/user/.ies4linux/ie6"

#Set the path to where you have WRA.exe
wine "/appl/registry-tools/WRA.exe"

Last Updated on Saturday, 12 September 2009 13:54
 
Data Carver Processors: Doc PDF Print E-mail
Written by Keven Murphy   
Saturday, 22 August 2009 09:43

Doc Processor

Like the others, this script takes anything that OpenOffice can read and turns it into animated GIFs.

  • Creates a series of web pages that contain a thumbnail of all readable docs
  • Gathers details about the files such as Exif data
  • Can gather whatever data you can think of due to plugins
Last Updated on Wednesday, 30 December 2009 19:12
Read more...
 
SANS SIFT Workstation Version 1.2 Released PDF Print E-mail

SANS just released their SIFT Workstation VMware Appliance. It has been loaded up with all of the forensics tools you could ask for. See the overview below from the SANS Forensics Blog:

SANS SIFT Workstation Overview

  • VMware Appliance
  • Ready to tackle forensics
  • Cross compatibility between Linux and Windows
  • Forensic tools preconfigured
  • A portable lab workstation you can now use for your investigations

You'll also find some of the tools Keven Murphy has written on the appliance.

Check out the write up on the SANS Forensics Blog at: http://sansforensics.wordpress.com/2008/12/24/happy-holidays-sans-sift-workstation-version-12-released/

Happy Holidays!

Last Updated on Wednesday, 31 December 2008 12:24
 
More Articles...
<< Start < Prev 1 2 Next > End >>

Page 1 of 2