The MetaDiver 2.0 Alpha2 has been released and available for download. https://45.76.237.35/Downloads/MetaDiver/MetaDiver_2.0.1_x64-alpha2.zip Resolved crash on Windows Server 2008 due to VisualBasic PowerPack not installed with .Net on servers. Various minor bug fixes and UI changes.
MetaDiver 2.0 is finally here. I hope to drop the release the alpha of 2.0 tomorrow in Downloads! This is a huge list of features and changes for MetaDiver. It’s been a LOT of work but a lot of fun and much of the research that has gone into the code has been hugely beneficial
If you have ever been looking for a way to access your computer disk without having to deal with user permissions and constrains the operating system enforces then this is the series to read. David Cowen is working on an excellent series called “Automating DFIR” (Digital Forensics Incident Response) on his blog “Hacking Exposed Computer
A new build of MetaDiver has been released. You can download it here. With this release v1.2.1 MetaDiver will no longer expire! This is a permanent change I decided to make. My original intent was to force people to upgrade but I decided this is just too much of a pain and causes confusion. I
I’ve made a few changes to ShadowKit to address feedback from users! (I know, finally) The changes that have been made are (changelog): *Exporting no longer uses numeric folders (0,1,2,x). Files are exported directly to the folder you have chosen for the exported files. *Fixed the Export Complete Dialogue so that it is now always
Recently I had a need to get Address Book information from an imaged Mac without having that computer up and running. Since I didn’t have the ability to do it on the running Mac I decided to try to reverse engineer the SQLite database that stores the AddressBook information. Below is what I put together.
Following my talk on SQLite Forensics at the CEIC conference I want to share the scripts I wrote but did not get the opportunity to demo during the talk! I talked about using Python to export data from the Favicon database in the Chrome web browser, any SQLite database using python. In this post I’m going
This is an updated post (cross-posted from my RRTX Blog!) about building Access Data’s FTK Toolkit filters outside of FTK. Access Data probably won’t like this since a bad filter can cause the client to crash if you build the filter wrong. So lets build it with care. If you are someone familiar with FTK
The latest build of MetaDiver is available for Download. MetaDiver – a solution for discovering file Meta-data. MetaDiver extracts file information fast and easy. Simply put it is great at pulling file data and making it easy to review ! In this build major interface enhancements. The ability to choose multiple file extension filters before