Skip to main content

Home/ ComputerForensicsTV/ Group items tagged structure

Rss Feed Group items tagged

cftvgroup

Plists | Taksati - 0 views

  • internal structure of Plist files
  • Plist files are found sprinkled throughout OS X and iOS and contain the various configuration settings and other information of use to the OS and applications.
  • Plists are key/value pairs that are stored in either text or binary.
  • ...2 more annotations...
  • XML is not a very efficient way to save data on disk
  • So, Apple introduced a binary format. When opened in something that doesn't like it, it will look like this
cftvgroup

Bulk Extract EXIF | Taksati - 0 views

  • Can you script that so I can do that to several hundred files, he said. Don’t have to, I said…
  • ExifTool is a extremely powerful command line utility that has been around since 2003. It is still actively maintained and has grown to encompass so many metadata types beyond EXIF that it has well outgrown its name. It also has some very powerful formatting and processing capabilities in it, making bulk extraction of just the data you want an easy task.
  • produces 38 data points
  • ...10 more annotations...
  • Irfanview
  • There is a lot of really good info in executable files,
  • Run Time Since Power Up : 5 days 2:24:57
  • But, ExifTool against the same file produces 72 data points.
  • And, since .dll files are structurally identical to .exe files, we get very similar data from them.
  • internal metadata inside office documents
  • Can recurse subdirectories if the target is a directory.
  • Can specify multiple filetypes using -ext switch instead of file mask.
  • Control the output format with -T, -csv, -json.
  • It should be one of your favorite tools.
1 - 2 of 2
Showing 20 items per page