![]() zip files, for example, you'd need to have the "zip" scanner enabled. Note that the words this scanner can access depend on which other scanners are on to include words in. Recovery description / archival usefulnessĪ list of all “words” extracted from the disk, useful for password cracking or to discover if an author ever used a specific term (including in deleted/hidden files). Bulk Extractor Scanners: Where They Output and What They Do ![]() Reports may contain false positives the "accounts" scanner may produce credit-card-number-like strings in its ccn.txt output file that are not, in fact, credit card numbers.īelow are the possible scanner options and what each scanner locates on your disk image. Additionally, many of the scanners produce a histogram file an addition to the main output file for example, the email scanner generates "email_histogram.txt" in addition to "email.txt". Multiple scanners might write to the same feature file: the "exif" scanner searches the file formats used by digital cameras, finds GPS coordinates in images, and writes those findings to the output file gps.txt a separate scanner, the gps scanner, searches Garmin Trackpoint data and also finds GPS coordinates and writes them to gps.txt. For example, the pii.txt report, although it is currently only written to by the "Accounts" scanner, will not necessarily only contain PII from credit cards and SSNs. Note that there is not necessarily a one-to-one relationship between scanners (toggled on or off) and the produced reports. after completing Step 6 of the Bulk Extractor tutorial). search for email addresses in order to locate correspondence between an author and her editors)īefore pressing the "Start bulk_extractor" button in the Bulk Extractor Viewer, you have the option of including or excluding a variety of scanners in the Bulk Extractor reports, via the checkboxes on the right side of the page (i.e. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |