May 31, 2023: bulk_extractor-2.0.3-1.{fc35,fc36,el7,el8,amzn2}.x86_64.rpm and bulk_extractor-2.0.3-1.el9.{aarch64,x86_64}.rpm -
Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures.
The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools.
Bulk_extractor also creates histograms of features that it finds, as features that are more common tend to be more important.
December 29, 2021: bulk_extractor-2.0.0.beta3-1.{,fc33,fc34,fc35,el7,el8}.x86_64.rpm -
Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures.
The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools.
Bulk_extractor also creates histograms of features that it finds, as features that are more common tend to be more important.
This is the development version for 2.0.0.
Note: These packages have been installed in the forensics-test repository.
November 19, 2021: bulk_extractor-1.6.0-4.{fc32,fc33,fc34,fc35,el7,el8}.x86_64.rpm -
Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures.
The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools.
Bulk_extractor also creates histograms of features that it finds, as features that are more common tend to be more important.
This version fixes many issues.
In addition, it also contains the BEViewer GUI front-end for bulk_extractor.
Note 1: This version was built with the expat-devel library to facility restarting bulk_extractor.
November 19, 2021: bulk_extractor-2.0.0.dev-2.{fc32,fc33,fc34,fc35,el7,el8}.x86_64.rpm -
Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures.
The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools.
Bulk_extractor also creates histograms of features that it finds, as features that are more common tend to be more important.
This is the development version for 2.0.0.
Note 1: These packages have been installed in the forensics-test repository.
Note 2: This version was built with the expat-devel library to facility restarting bulk_extractor.
October 6, 2021: bulk_extractor-2.0.0.dev-1.{fc32,fc33,fc34,el7,el8}.x86_64.rpm -
Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures.
The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools.
Bulk_extractor also creates histograms of features that it finds, as features that are more common tend to be more important.
This is the development version for 2.0.0.
Note that these packages have been installed in the forensics-test repository.
October 1, 2020: bulk_extractor-1.6.0-3.{fc27,fc28,fc29,fc30}.{i686,x86_64}.rpm and bulk_extractor-1.6.0-3.{fc31,fc32,el7,el8}.x86_64.rpm -
Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures.
The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools.
Bulk_extractor also creates histograms of features that it finds, as features that are more common tend to be more important.
This version fixes many issues.
In addition, it also contains the BEViewer GUI front-end for bulk_extractor.
This version was rebuilt to add the python3-matplotlib dependency which caused be_grapher.py to be removed from CentOS/RHEL 7.
April 17, 2020: bulk_extractor-1.6.0-2.{fc26,fc27,fc28,fc29,fc30}.{i686,x86_64}.rpm and bulk_extractor-1.6.0-2.{fc31,el7,el8}.x86_64.rpm -
Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures.
The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools.
Bulk_extractor also creates histograms of features that it finds, as features that are more common tend to be more important.
This version fixes many issues.
In addition, it also contains the BEViewer GUI front-end for bulk_extractor.
This version was rebuilt to add SQLite and LibXML build dependencies.
April 10, 2020: bulk_extractor-1.6.0-1.{fc26,fc27,fc28,fc29,fc30}.{i686,x86_64}.rpm and bulk_extractor-1.6.0-1.{fc31,el7,el8}.x86_64.rpm -
Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures.
The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools.
Bulk_extractor also creates histograms of features that it finds, as features that are more common tend to be more important.
This version fixes many issues.
In addition, it also contains the BEViewer GUI front-end for bulk_extractor.
October 3, 2014: bulk_extractor-1.5.5-2.{fc17,fc18,fc19,fc20,el6,el7}.{i686,x86_64}.rpm - Bulk_extractor
bulk_extractor is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without
parsing the file system or file system structures. The results are stored in feature files that can be easily inspected, parsed, or
processed with automated tools. bulk_extractor also creates histograms of features that it finds, as features that are more
common tend to be more important. This version fixes many issues. In addition, it also contains the BEViewer GUI front-end for bulk_extractor.
Note that this release of bulk_extractor is not available for CentOS/RHEL 5 due to an outdated version of flex for that OS.
The change in this release fixes an issue where python3.2 was explicitly referenced in report_encodings.py.
September 19, 2014: bulk_extractor-1.5.5-1.{fc17,fc18,fc19,fc20,el6,el7}.{i686,x86_64}.rpm - Bulk_extractor
bulk_extractor is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without
parsing the file system or file system structures. The results are stored in feature files that can be easily inspected, parsed, or
processed with automated tools. bulk_extractor also creates histograms of features that it finds, as features that are more
common tend to be more important. This version fixes many issues. In addition, it also contains the BEViewer GUI front-end for bulk_extractor.
Note that this release of bulk_extractor is not available for CentOS/RHEL 5 due to an outdated version of flex for that OS.
August 15, 2014: bulk_extractor-1.5.3-1.{fc17,fc18,fc19,fc20,el6,el7}.{i686,x86_64}.rpm - Bulk_extractor
bulk_extractor is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without
parsing the file system or file system structures. The results are stored in feature files that can be easily inspected, parsed, or
processed with automated tools. bulk_extractor also creates histograms of features that it finds, as features that are more
common tend to be more important. This version fixes many issues. In addition, it also contains the BEViewer GUI front-end for bulk_extractor.
Note that this release of Bulk_extractor is not available for CentOS/RHEL 5 due to an outdated version of flex for that OS.
November 27, 2012: bulk_extractor-1.3.1-2.{fc14,fc15,fc16,fc17,el5,el6}.{i686,x86_64}.rpm - Bulk_extractor
bulk_extractor is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without
parsing the file system or file system structures. The results are stored in feature files that can be easily inspected, parsed, or
processed with automated tools. bulk_extractor also creates histograms of features that it finds, as features that are more
common tend to be more important. This version fixes many issues. In addition, it also contains the BEViewer GUI front-end for bulk_extractor.
June 4, 2012: bulk_extractor-1.2.2-3.{fc14,fc15,fc16,fc17,el5,el6}.{i686,x86_64}.rpm - Bulk_extractor
has been repackaged, where all of the supporting tools are now installed as distributed by the author. These tools are installed in /usr/bin and
are the following:
bulk_diff.py - compares two bulk_extractor runs and reports what's changed.
identify_filenames.py - reads feature files and a DFXML file for a disk image and reports the file from which each feature came
post_process_exif.py - reads the exif.txt feature file and produces a CSV file from all of the XML-encoded EXIF information
This directory also contains modules for working with digital forensics XML:
bulk_extractor.py - a DFXML python module for reading the report.xml file created by bulk_extractor and reading the feature files.
Also allows reading a ZIP file produced from a bulk_extrator output directory as if it were uncompressed.
dfxml.py - a DFXML python module for reading DFXML files
fiwalk.py - a DFXML python module for producing DFXML streams using fiwalk
This directory also contains an out-of-date multi-drive correlator; this will be operational by August 1, 2012:
cda2.py - multi drive correlator
cda_test.py - test program for multi-drive correlator
cda_tool.py - another multi-drive correlator
June 1, 2012: bulk_extractor-1.2.2-2.{fc13,fc14,fc15,fc16,fc17,el5,el6}.{i686,x86_64}.rpm - Bulk_extractor was
packaged incorrectly, producing incorrect version installed in /usr/bin/bulk_extractor. This release corrects that problem.
May 29, 2012: bulk_extractor-1.2.2-1.{fc13,fc14,fc15,fc16,el5,el6}.{i686,x86_64}.rpm - Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file
system structures. The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools.
Bulk_extractor also created a histograms of features that it finds, as features that are more common tend to be more important.
See the ChangeLog file (/usr/share/doc/bulk_extractor-1.2.2/ChangeLog) in the package for a list of changes.
February 15, 2012: bulk_extractor-1.2.0-1.{fc13,fc14,fc15,fc16,el5,el6}.{i686,x86_64}.rpm - Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file
system structures. The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools.
Bulk_extractor also created a histograms of features that it finds, as features that are more common tend to be more important.
See this Changelog for a list of changes.
January 3, 2012: bulk_extractor-1.1.3-1.{fc13,fc14,fc15,fc16,el5,el6}.{i386,x86_64}.rpm - Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file
system structures. The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools. bulk_extractor
also created a histograms of features that it finds, as features that are more common tend to be more important.
See /usr/share/doc/bulk_extractor-1.1.3/ChangeLog after the package has been installed.
October 4, 2011: bulk_extractor-1.0.7-1.{fc13,fc14,fc15,el6}.{i386,x86_64}.rpm - Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file
system structures. The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools. bulk_extractor
also created a histograms of features that it finds, as features that are more common tend to be more important.
August 23, 2011: bulk_extractor-1.0.2-1.{fc13,fc14,fc15,el6}.{i386,x86_64}.rpm - Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file
system structures. The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools. bulk_extractor
also created a histograms of features that it finds, as features that are more common tend to be more important.