slackbuilds/system/bulk_extractor
B. Watson 2e1fe19919 system/bulk_extractor: Wrap README at 72 columns.
Signed-off-by: B. Watson <yalhcru@gmail.com>
2022-03-17 12:38:03 -04:00
..
README system/bulk_extractor: Wrap README at 72 columns. 2022-03-17 12:38:03 -04:00
bulk_extractor.SlackBuild system/bulk_extractor: Updated for version 20210928_692ee97. 2021-11-12 00:39:41 +07:00
bulk_extractor.info system/bulk_extractor: Updated for version 20210928_692ee97. 2021-11-12 00:39:41 +07:00
slack-desc various: Fix slack-desc formatting and comment nit picks. 2013-11-22 02:29:22 -05:00

README

bulk_extractor is a C++ program that scans a disk image, a file, or
a directory of files and extracts useful information without parsing
the file system or file system structures. The results are stored in
feature files that can be easily inspected, parsed, or processed with
automated tools. bulk_extractor also creates histograms of features
that it finds, as features that are more common tend to be more
important.

bulk_extractor is distinguished from other forensic tools by its speed
and thoroughness.

Optional dependencies include libewf (recognized if installed) and
afflib (recognized if installed).

If you want to use the java based GUI (BEViewer), you will also need
to have java installed. This has been tested with JDK.