infosec – EasyMetaData

Lets use PowerShell to review DLL’s without certs

By DaveApril 3, 20192 commentsinformation security, infosec, metadata, PowerShell, Windows 10

The other day I got bored and decided to do a little PowerShell one-liner on my Windows 10 gaming rig. I wanted to see if I have any DLL’s that are unsigned or invalid in my C:\Windows directories. I was surprised to find I did in fact have two odd DLL’s. In PowerShell you can

MDViewer 1.0 initial release

By DaveJanuary 12, 20191 commentapache tika, Discovery, doc, docx, Early case assessment, Electronic Discovery, eml, exif, exiftool, Forensics, information security, infosec, MetaData, metadata, MetaDiver, pdf, xlsx

Announcing the initial 1.0 release of MDViewer and MDViewerCLI. Powered purely by Apache TIKA for parsing metadata. MDViewer A viewer for viewing file metadata (parsed by Apache TIKA) similar to MetaDiver review window. Review metadata, strings, hex and more. It supports drag and drop and windows file-open support. MDViewerCLI A simple command line tool for

Security Onion is what #SIEM @securityonion #dfir #infosec

By DaveAugust 27, 2018information security, infosec, SIEM#SIEM, @securityonion, dfir, infosec

It’s been a while since I have written a post. I need to write something so I figured I’d write about what takes up most of my days… Honestly, a lot has happened in my personal life. I got married, purchased a house and I’m expecting a baby. So it doesn’t take much imagination to

MetaDiver 3.1.1 is released

By DaveJune 16, 2017apache tika, C#, coding, Computer Forensics, Discovery, doc, docx, Early case assessment, elastic search, email, eml, eml, exiftool, Incident Response, information security, infosec, MetaData, metadata, MetaDiver, msg, pdf, pst, pst, xlsx#eca, dfir, infosec, metadata

The latest version of MetaDiver is available for download. Download: Metadiver 3.1.1 Numerous improvements from previous release. Using the latest version is highly recommended! Changelog v3.1.1 (build 1623) -bugfixes to paging in Review window -fix to keyword search not pulling back hits in some cases -prevent empty line in keywords on save -performance optimizations -resized

MetaDiver 3.0 beta is released #dfir #infosec #metadata

By DaveMay 4, 2017apache tika, Computer Forensics, doc, docx, Early case assessment, elastic search, Electronic Discovery, email, eml, exiftool, Forensics, infosec, MetaData, MetaDiver, msg, pdf, pst, pst, xlsx

I’m happy to announce the first beta release of MetaDiver 3.0! About: MetaDiver is a utility to slice and dice files and recover metadata from various types of files such as emails, documents, pictures, videos and music among many files. With MetaDiver you will find detailed metadata that many tools do not find. It has

Extract document #metadata – #Tika and #exiftool

By DaveJuly 26, 2016apache tika, Computer Forensics, Discovery, exiftool, Forensics, information security, infosec, MetaData, MetaDivercad, computer forensic, dfir, digital forensic, document properties, exif, ID3, infosec, meta-data, metadata, xmp

Intro Metadata is critical to any investigation. So much knowledge can be gleamed from the review of metadata from pictures and documents that it’s a big topic in the news. Look at the DNC hack last month. But for those of us in the digital forensics and the field of information security metadata has always

Lets say someone hacked your accounts

By DaveMarch 12, 2016hacked account, information security, infosec, Mac, Malware, Windows 10hacked, information security, infosec

Inevitably someone is going to have an online account hacked. Someone gets access to your email, cloud or phone using your information through various means. They could have done this because they want something or they just don’t like you, the list is long. Recently someone was in this exact situation and needed some advice.

EasyMetaData

Powerful access to data

Category Archives: infosec