bulk_extractor-2.0.0.dev-1.{fc32,fc33,fc34,el7,el8}.x86_64.rpm -
Bulk_extractor
is a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures.
The results are stored in feature files that can be easily inspected, parsed, or processed with automated tools.
Bulk_extractor also creates histograms of features that it finds, as features that are more common tend to be more important.
This is the development version for 2.0.0.
Note that these packages have been installed in the forensics-test repository.
bulk-reviewer-0.3.0-1.{fc32,fc33,fc34,el8}.x86_64.rpm -
< href="https://bulk-reviewer.readthedocs.io/en/latest/">BulkReviewer
is an Electron desktop application that aids in identification, review, and removal of sensitive files in directories and disk images.
Bulk Reviewer scans directories and disk images for personally identifiable information (PII) and other sensitive information using bulk_extractor, a best-in-class digital forensics tool.
The desktop application enables users to configure, start, and review scans; generate CSV reports of features found; and export sets of files (either those free of sensitive information,
or those with PII that should be restricted or run though redaction software).
EVTXtract-0.2.3-1.{fc32,fc33,fc34,el7,el8}.x86_64.rpm -
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
CERT-Forensics-Tools-1.0-96.{fc32,fc33,fc34,el7,el8}.x86_64.rpm -
This relese does the following:
Added bulk-reviewer for all except CentOS/RHEL 7.
Added EVTXtract.
fmem-kernel-modules-fc34-x86_64-1.6-1.21.noarch.rpm -
Support for the following kernels were added for Fmem:
5.14.9-200 for FC34
lime-kernel-modules-fc34-x86_64-1.9.1-21.noarch.rpm -
Support for the following kernels were added for LiME:
5.14.9-200 for FC34
fmem-kernel-modules-fc33-x86_64-1.6-1.41.noarch.rpm -
Support for the following kernels were added for Fmem:
5.14.9-100 for FC33
lime-kernel-modules-fc33-x86_64-1.9.1-41.noarch.rpm -
Support for the following kernels were added for LiME: