When you use Visual Studio it leaves a lot behind that is valuable to an investigator. A valuable trove of information may exist. We are going to review briefly the “Find and Replace” history that gets left behind. Find and Replace Registry location “…\Software\Microsoft\VisualStudio\<version #>\Find” Below you can my see Find history.
Category Archives: C#
The latest version of MetaDiver is available for download. Download: Metadiver 3.1.1 Numerous improvements from previous release. Using the latest version is highly recommended! Changelog v3.1.1 (build 1623) -bugfixes to paging in Review window -fix to keyword search not pulling back hits in some cases -prevent empty line in keywords on save -performance optimizations -resized
I’m happy to announce that MetaDiver 2.5.0 is available for download. This is a big release with some fun new stuff. If you are not familiar with MetaDiver and want to understand what it can do for you, put simply it allows you to review meta-data stored in many files such as pictures, office documents
Introducing a simple console app to find the outlook bitness and version information. Works with oem and office365 installs. You can get the source from my GitHub page at https://github.com/easymetadata/DetectOutlook.NET Enjoy!
I’m excited to announce that MetaDiver 2.1 has been released! This is close to a full rewrite with better scalability. The ability to review metadata in MetaDiver has been greatly improved. The back-end has been rewritten to use SQLite. Many new documents are now handled including email archives, Windows Shortcuts including lnk and jumplists, legacy
Github account created with open source projects being added. https://github.com/easymetadata
The MetaDiver 2.0 Alpha2 has been released and available for download. https://22.214.171.124/Downloads/MetaDiver/MetaDiver_2.0.1_x64-alpha2.zip Resolved crash on Windows Server 2008 due to VisualBasic PowerPack not installed with .Net on servers. Various minor bug fixes and UI changes.
MetaDiver 2.0 is finally here. I hope to drop the release the alpha of 2.0 tomorrow in Downloads! This is a huge list of features and changes for MetaDiver. It’s been a LOT of work but a lot of fun and much of the research that has gone into the code has been hugely beneficial
A new build of MetaDiver has been released. You can download it here. With this release v1.2.1 MetaDiver will no longer expire! This is a permanent change I decided to make. My original intent was to force people to upgrade but I decided this is just too much of a pain and causes confusion. I
Over the weekend I finally took the time to dig through the source code from Arsenal for mounting forensic images. It’s been on my list for a long time so I was excited to do some hacking and see what I could come up with. Although the documentation is not good I was able to