Tools

641 results - showing 281 - 300
« 1 ... 10 11 12 13 14 15 16 17 18 19 ... »

Tools

License Type
Free
Developer
Guidance/OpenText

Decodes the UUID and UID from the names of sub-folders under /private/var/folders in MacOS.

Tools

License Type
Free
Developer
Guidance/OpenText

This template may serve you as basis for your own specific template and includes many Bookmark folders for often encountered topics during your exams. Bookmark Formats for reporting purposes are provided and tailored to each individual type of data. Includes over 80 pre-defined Bookmark Folders for commonly encountered artifacts, broken down into detailed categories like File Sharing Clients, Malware Analysis, Social Networking, Browsers and more.

Tools

License Type
Free
Developer
Guidance/OpenText

Dieses umfassende Berichtstemplate kann als Basis für Ihre eigene Vorlage dienen. Sie ist sehr umfangreich und enthält Bookmark-Verzeichnisse für die häufigsten Topics Ihrer Untersuchungen. Die Darstellung der verschiedenen Lesezeichen wurde gemäß Kundenwünschen angepasst und kann selbstverständlich weiter optimiert werden.

Tools

License Type
Free
Developer
Guidance/OpenText

This script parses MacOS chunk-storage SQLite database-files used by the previous-versions feature introduced in MacOS X Lion. The chunk-storage database is located at the following path in HFS+ and APFS volumes that support this feature -

Tools

License Type
Free
Developer
Guidance/OpenText

The purpose of this script is to assist the examiner to visualize the paths of relevant target files within a Mac OS X Time Machine volume.

Tools

License Type
Free
Developer
Guidance/OpenText

This script parses thumbnails from MacOS QuickLook thumbnail-cache files.

Tools

License Type
Free
Developer
Guidance/OpenText

This script searches user-specified Mac OS X plaintext log-files for log-entries containing one or more keywords. Bzip2 and Gzip archives of each log-file will expanded and searched automatically. Matching logs are written to bookmarks and a tab-delimited spreadsheet file. The script can also be used with any other UTF-8 encoded log-files that have UNIX line-breaks.

Tools

License Type
Free
Developer
Guidance/OpenText

This EnScript is designed to convert Microsoft Outlook *.olk14MsgSource and *.olk15MsgSource message-files to *.EML files that can be opened in a suitable application.

Tools

License Type
Free
Developer
Guidance/OpenText

This script parses user-specified Mac OS X OpenBSM audit logs, which are usually found in the following folder -

Tools

License Type
Free
Developer
Guidance/OpenText

This EnScript is designed to carve MP4, MOV, M4A and HEIC files.

Tools

License Type
Free
Developer
Guidance/OpenText

This script parsers user-specified Mac OS X binary cookie files. Output is by way of bookmarks and a tab-delimited spreadsheet file.

Tools

License Type
Free
Developer
Guidance/OpenText

This is a small utility that will decrypt the user-password for a user set to automatically log-in to a Mac OS X system.

Tools

License Type
Free
Developer
Guidance/OpenText

By right clicking a file this EnScript compares the selected file to the VirusTotal and/or ThreatExpert databases and determines if it is malware. Results can be bookmarked. An internet connection is required.

Tools

License Type
Free
Developer
Guidance/OpenText

This plugin has been designed as primarily as a classroom aid to assist in the examination of MFT records.

Tools

License Type
Free
Developer
Guidance/OpenText

This script is designed to identify NTFS files/folders whose timestamps may have been adjusted, possibly to try and divert an examiner's attention from their presence.

Tools

License Type
Free
Developer
Guidance/OpenText

Low Hanging Fruit Please extracts file name path and MD5 to a SQLite database that also contains an Item Moniker data for each entry. An EnCase Review Import File template is also created to allow tagging after external data analysis is completed.

Tools

License Type
Free
Developer
Guidance/OpenText

Rearrange date and time information to build an informative timeline.

Tools

License Type
Free
Developer
Guidance/OpenText

This EnScript creates a bookmark of the logon banner and logon screen. This information is sometimes needed as proof that there is no expectation of privacy.

Tools

License Type
Free
Developer
Guidance/OpenText

This EnScript will search all tagged items for known.met record fragments from eMule 0.5. If these records are found it will parse the records and the output will be to a tab delimited file in the default case export folder for further analysis in Excel or other spreadsheet application.

Tools

License Type
Free
Developer
Guidance/OpenText

This script is designed to parse shortcut-link streams as defined by the Microsoft [MS-SHLLINK] document specification, which was originally released in 2010.

641 results - showing 281 - 300
« 1 ... 10 11 12 13 14 15 16 17 18 19 ... »