Whoops. My previous posting was in error. We already have a metadata extractor for ODF; its called "odf_extractor" I have added it to the 0.5.10 version. ...
docx_extractor.py is in Python and will run on any Python platform. We didn't make it handle OpenOffice documents, but that's a good idea. I'll add it this...
On Tue, 24 Nov 2009 21:59:39 -0800, Simson Garfinkel wrote ... Hi Simson, Seems like a very cool app! Quick question - not having access to a Linux system at...
Hi. The program that extracts metadata from Microsoft Office XML files is is called docx_extractor.py. I just added this tool to the "python" directory of the...
Caine 1.5 is online! http://www.caine-live.net/ The Changelog is in home page. New tools, new manual, new web site, new graphics, new kernel. Thanks :-) ... ...
Hello Friends, I am really new to Forensic field. I am doing Master of Engineering in Information Systems Security. I like this IT Security Field. Since, I am...
Today was born Caine 1.0, new tools, new mounting policies (safer), new patch....enjoy it! http://www.caine-live.net/ bye ... Dott. Nanni Bassetti Consulente...
Hi, folks ! What ssdeep hashset do you use to sort/filter a forensic image ? NSRL doesn't have it, yeah ? []s -- Tony Rodrigues, CISSP, CFCP Forense...
I use libextractor for traditional MS Office files and custom-written tools for the XML-based file formats. You may also find this interesting: Garfinkel, S.,...
If you are into Perl programing, look at Harlan Carvey's Perl mod File::MSWord and see: http://windowsir.blogspot.com/2006/09/metadata-and-ediscovery.html you...
Payne Consulting's Metadata Assistant for versions of Office prior to 2007. Make sure that you have Office 2003 installed not Office 2007 and don't convert...
Hi all, Please forgive the cross-posting. I am trying to find any information on MS office metadata, and how to extract it. Is there a spec available for...
Hi farmerdude I am looking for a feature in web server that is it possible to IDENTIFY about status of data. I mean that weather it is system/browser...
Although I normally don't top post, I suspect that is probably more practical in your case. Not sure if the accessibility software properly skips to the...
Jacques, Thank you for the honest response and warnings. I realize there are some real issues with trying to hunt this down, however, since I have been...
Hi All, Recently I came across a firefox plug-in named Tamper Data. And during its trial run i found that it is easy to tamper even encrypted data using this ...
... Hash: SHA1 Don, The important part is to get an image as early as possible. I wouldn't worry too much about the method you use to image. There has been...
I'd suggest using some basic timeline analysis to see what that turns up. If there is a file being written to log keystrokes, it should lite up in a timeline....
... I must admit I was thinking of the same thing. Are you going to examine your machines for evidence of malware? You mention that you want to see if...
Don If I were you I would start your adventures at http://www.linuxleo..com and read the introductory guide available there! It will give you some answers but...
Hello Gents, Maybe I am not seeing the proverbial "Schwartz" here, but once you have the image how are you going to go about and try and find the key logger?...
The fastest/easiest way to do it will just be power down the machines, put the hard drives in the Debian machine and use dd. Putting all the drives on the...
Hello, I am new to this field. I am trying to learn my way into the world of computer forensics, and as such, I have a "real-world" need for the tools...
The Register - LinuxCon 2009: Does Linux desktop even need to be popular? There are, shall we say, differing options among the open source cognoscenti gathered...