Skip to content

Commit

Permalink
Deployed 23cd9b4 with MkDocs version: 1.5.3
Browse files Browse the repository at this point in the history
  • Loading branch information
decirella committed Jul 9, 2024
1 parent cb1d73d commit 8673af8
Show file tree
Hide file tree
Showing 6 changed files with 32 additions and 24 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -132,7 +132,7 @@

<h1 id="bulk-extractor-viewer">Bulk Extractor Viewer</h1>
<h3 id="overview">Overview</h3>
<p>The Bulk Extractor Viewer (BEviewer) is a graphical interface for <a href="https://forensicswiki.xyz/wiki/index.php?title=Bulk_extractor">bulk_extractor</a>, "a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures. The results can be easily inspected, parsed, or processed with automated tools. bulk_extractor also creates a histogram of features that it finds, as features that are more common tend to be more important."</p>
<p>The Bulk Extractor Viewer (BEviewer) is a graphical interface for <a href="https://forensics.wiki/bulk_extractor/">bulk_extractor</a>, "a C++ program that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures. The results can be easily inspected, parsed, or processed with automated tools. bulk_extractor also creates a histogram of features that it finds, as features that are more common tend to be more important."</p>
<p>While originally intended for law enforcement, bulk_extractor can be used by digital archivists to quickly and thoroughly examine a disk image for a wide variety of information. The most common use for such analysis is locating personally identifiable information (PII) that a donor may want redacted before his or her materials are made publicly available, but bulk_extractor can locate other types of potentially sensitive information as well.</p>
<p>The instructions below take you through the process of running bulk_extractor via the Bulk Extractor Viewer utility, a GUI interface for running bulk_extractor and viewing the results. Archivists can view the results through the GUI and also further process them using the digital forensics tools in the BitCurator environment.</p>
<h3 id="step-by-step-guide">Step-by-step Guide</h3>
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@
</li>
<li class="toctree-l1 current"><a class="reference internal current" href="./">Imaging and Recovery Guides</a>
<ul class="current">
<li class="toctree-l2"><a class="reference internal" href="#overview">Overview</a>
<li class="toctree-l2"><a class="reference internal" href="#overviews">Overviews</a>
</li>
<li class="toctree-l2"><a class="reference internal" href="#guides">Guides</a>
</li>
Expand Down Expand Up @@ -138,7 +138,7 @@
<div class="section" itemprop="articleBody">

<h1 id="imaging-and-recovery-guides">Imaging and Recovery Guides</h1>
<h3 id="overview">Overview</h3>
<h3 id="overviews">Overviews</h3>
<p>Whether you are creating forensic disk images, mounting physical media to inspect and analyze digital materials, or transferring files, BitCurator supports multiple acquisition scenarios through seven open-source disk imaging tools.</p>
<ul>
<li><strong>Brasero</strong>: A GNOME application to burn CDs and DVDs, and create 1:1 copies of CDs and DVDs.</li>
Expand Down
46 changes: 27 additions & 19 deletions Tools/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -44,8 +44,16 @@
<li class="toctree-l1 current"><a class="reference internal current" href="./">Tools</a>
<ul class="current">
<li class="toctree-l2"><a class="reference internal" href="#overview">Overview</a>
<ul>
<li class="toctree-l3"><a class="reference internal" href="#imaging-and-recovery">Imaging and Recovery</a>
</li>
<li class="toctree-l2"><a class="reference internal" href="#additional-tools">Additional tools</a>
<li class="toctree-l3"><a class="reference internal" href="#forensic-analysis-tools">Forensic analysis tools</a>
</li>
<li class="toctree-l3"><a class="reference internal" href="#packaging-and-transfer">Packaging and Transfer</a>
</li>
<li class="toctree-l3"><a class="reference internal" href="#additional-tools">Additional tools</a>
</li>
</ul>
</li>
</ul>
</li>
Expand Down Expand Up @@ -138,24 +146,24 @@
<div class="section" itemprop="articleBody">

<h1 id="tools">Tools</h1>
<h3 id="overview">Overview</h3>
<h2 id="overview">Overview</h2>
<p>The BitCurator Environment includes many individual tools to perform specific curation tasks. Listed here are all tools packaged by default in the environment, organized by the folder found on the BitCurator desktop. Links will take users to the corresponding external site or documentation. Where applicable, relevant BitCurator <strong>Step-by-Step Guides</strong>are listed as well.</p>
<p>Because BitCurator is an Ubuntu environment, users are able to download and install tools as in any other Ubuntu distribution or Linux OS.</p>
<p>In addition, much functionality is found in the file navigation system, Nautilus, through contextual menus. Listed are guides for many of these scripts.</p>
<ul>
<li><a href="/All Step-by-Step Guides/Forensics and Reporting Guides/Data Triage (Nautilus)">Data Triage</a></li>
<li><a href="/All Step-by-Step Guides/Forensics and Reporting Guides/Create MD5 Sums (Nautilus)">Create MD5 Sums</a></li>
<li><a href="/All Step-by-Step Guides/Forensics and Reporting Guides/Display a file in Hex editor (Nautilus)">Display a file in Hex editor</a></li>
<li><a href="/All Step-by-Step Guides/Forensics and Reporting Guides/Disk Image Metadata (Nautilus)">Disk Image Metadata</a></li>
<li><a href="/All Step-by-Step Guides/Forensics and Reporting Guides/Extract Compressed Files (Nautilus)">Extract Compressed Files</a></li>
<li><a href="/All Step-by-Step Guides/Forensics and Reporting Guides/Live Search for Files (Nautilus)">Live Search for Files</a></li>
<li><a href="/All Step-by-Step Guides/Imaging and Recovery Guides/Safely Mount Devices">Safely Mount Device</a></li>
<li><a href="../All Step-by-Step Guides/Forensics and Reporting Guides/Data Triage (Nautilus)">Data Triage</a></li>
<li><a href="../All Step-by-Step Guides/Forensics and Reporting Guides/Create MD5 Sums (Nautilus)">Create MD5 Sums</a></li>
<li><a href="../All Step-by-Step Guides/Forensics and Reporting Guides/Display a file in Hex editor (Nautilus)">Display a file in Hex editor</a></li>
<li><a href="../All Step-by-Step Guides/Forensics and Reporting Guides/Disk Image Metadata (Nautilus)">Disk Image Metadata</a></li>
<li><a href="../All Step-by-Step Guides/Forensics and Reporting Guides/Extract Compressed Files (Nautilus)">Extract Compressed Files</a></li>
<li><a href="../All Step-by-Step Guides/Forensics and Reporting Guides/Live Search for Files (Nautilus)">Live Search for Files</a></li>
<li><a href="../All Step-by-Step Guides/Imaging and Recovery Guides/Safely Mount Devices">Safely Mount Device</a></li>
</ul>
<p>Imaging and Recovery<br />
<strong><a href="https://wiki.gnome.org/Apps/Brasero">Brasero</a></strong>: GUI application to copy data and audio CD and DVDs</p>
<h3 id="imaging-and-recovery">Imaging and Recovery</h3>
<p><strong><a href="https://wiki.gnome.org/Apps/Brasero">Brasero</a></strong>: GUI application to copy data and audio CD and DVDs</p>
<p><strong><a href="https://guymager.sourceforge.io">Guymager</a></strong>: Open-source forensic disk imaging tool</p>
<ul>
<li>See the <a href="/All Step-by-Step Guides/Imaging and Recovery Guides/Imaging with Guymager">Creating a Disk Image Using Guymager</a> <strong>Step-by-Step Guide</strong>.</li>
<li>See the <a href="../All Step-by-Step Guides/Imaging and Recovery Guides/Imaging with Guymager">Creating a Disk Image Using Guymager</a> <strong>Step-by-Step Guide</strong>.</li>
</ul>
<p><a href="http://cdrdao.sourceforge.net"><strong>cdrdao</strong></a>: CD imaging tool (primarily for audio CDs)</p>
<p><strong><a href="https://clonezilla.org">Clonezilla</a></strong>: A imaging and cloning program for partitions and disks</p>
Expand All @@ -167,25 +175,25 @@ <h3 id="overview">Overview</h3>
<ul>
<li>More documentation at the <a href="https://forensicswiki.xyz/wiki/index.php?title=Libewf">Forensics wiki</a>.</li>
</ul>
<p>Forensic analysis tools</p>
<h3 id="forensic-analysis-tools">Forensic analysis tools</h3>
<p><strong>BitCurator Disk Image Access:</strong> A GUI interface to browse raw and forensically-packaged disk images, export files and deleted items, and view disk image metadata.</p>
<p><strong>BitCurator Mounter</strong>: A GUI application to list currently attached devices along with technical details. Allows users to mount fixed and removable media according to the current mount policy.</p>
<p><strong>BitCurator Reporting Tool</strong>: A GUI-driven (and optionally command-line) tool for running forensics tools in sequence to produce human- and machine-readable reports in <a href="https://www.github.com/simsong/dfxml">DFXML</a>.</p>
<ul>
<li>Find instructions at the <a href="/All Step-by-Step Guides/Forensics and Reporting Guides/Creating Disk Image Reports using the BitCurator Reporting Tool">Creating Disk Image Reports using the BitCurator Reporting Tool</a> <strong>Step-by-Step Guide</strong>.</li>
<li>Find instructions at the <a href="../All Step-by-Step Guides/Forensics and Reporting Guides/Creating Disk Image Reports using the BitCurator Reporting Tool">Creating Disk Image Reports using the BitCurator Reporting Tool</a> <strong>Step-by-Step Guide</strong>.</li>
<li>Use of the Reporting Tool is also covered in the <a href="https://github.com/BitCurator/bitcurator-distro/wiki/Releases#quickstart-guide">Quickstart Guide</a>.</li>
</ul>
<p><strong><a href="https://github.com/tw4l/brunnhilde">Brunnhilde</a></strong>: Generates aggregate reports of files in a directory or disk image based on input from Richard Lehane's <a href="http://www.itforarchivists.com/siegfried">Siegfried</a>.</p>
<p><a href="https://github.com/simsong/bulk_extractor/wiki/BEViewer"><strong>bulk_extractor Viewer (BEViewer)</strong></a>: A GUI front-end for <a href="https://github.com/simsong/bulk_extractor">bulk_extractor</a></p>
<ul>
<li>See the <a href="https://confluence.educopia.org/display/~aberish/Bulk+Extractor+Viewer">Bulk Extractor Viewer</a> <strong>Step-by-Step Guide</strong>.</li>
<li>See the <a href="https://confluence.educopia.org/display/~aberish/Regular+Expressions+in+Bulk+Extractor">Regular Expressions in Bulk Extractor</a> <strong>Step-by-Step Guide</strong>.</li>
<li>bulk_extractor is a critical component of the <a href="https://confluence.educopia.org/display/~aberish/Annotated+Features+Report">Annotated Features Report</a> <strong>Step-by-Step Guide</strong>.</li>
<li>See the <a href="../All Step-by-Step Guides/Forensics and Reporting Guides/Bulk Extractor Viewer/">Bulk Extractor Viewer</a> <strong>Step-by-Step Guide</strong>.</li>
<li>See the <a href="../All Step-by-Step Guides/Forensics and Reporting Guides/Regular Expressions in Bulk Extractor/">Regular Expressions in Bulk Extractor</a> <strong>Step-by-Step Guide</strong>.</li>
<li>bulk_extractor is a critical component of the <a href="../All Step-by-Step Guides/Forensics and Reporting Guides/Annotated Features Report/">Annotated Features Report</a> <strong>Step-by-Step Guide</strong>.</li>
</ul>
<p><strong><a href="http://disktype.sourceforge.net">Disktype</a>:</strong> Detects the content format of a disk or disk image</p>
<p><strong><a href="https://forensicswiki.xyz/wiki/index.php?title=Fiwalk">Fiwalk</a></strong>: Fiwalk is part of <a href="https://www.sleuthkit.org/sleuthkit/">The Sleuth Kit's</a> collection of digital forensics tools and is used to produce a DFXML (Digital Forensics XML) report on the contents of a disk image within the <strong>BitCurator Reporting Tool</strong>.</p>
<ul>
<li>See the <a href="https://confluence.educopia.org/display/~aberish/Fiwalk">fiwalk</a> <strong>Step-by-Step Guide</strong>.</li>
<li>See the <a href="../All Step-by-Step Guides/Forensics and Reporting Guides/Fiwalk/">fiwalk</a> <strong>Step-by-Step Guide</strong>.</li>
</ul>
<p><strong><a href="http://md5deep.sourceforge.net">md5deep</a></strong>: Set of programs to compute MD5, SHA-1, SHA-256, Tiger, or Whirlpool message digests on an arbitrary number of files</p>
<p><strong><a href="http://rjhansen.github.io/nsrllookup/">nsrllookup</a></strong>: Query tool to check for a matching MD5 hash in the National Software Reference Library Reference Data Set</p>
Expand All @@ -194,7 +202,7 @@ <h3 id="overview">Overview</h3>
<p><a href="http://roussev.net/sdhash/sdhash.html"><strong>SDHash</strong></a>: File similarity tool using similarity digests</p>
<p><a href="https://ssdeep-project.github.io/ssdeep/index.html"><strong>ssdeep</strong></a>: Fast hash generation</p>
<p><strong><a href="https://www.cgsecurity.org/wiki/TestDisk">TestDisk</a></strong>: Data recovery software with focus on recovering lost partitions, making non-booting disks bootable again/partition table recovery</p>
<p>Packaging and Transfer</p>
<h3 id="packaging-and-transfer">Packaging and Transfer</h3>
<p><strong><a href="https://github.com/LibraryOfCongress/bagit-python">BagIt Python Library</a></strong>: Command line implementation of the BagIt specification</p>
<p><strong><a href="https://sourceforge.net/projects/grsync/">Grsync</a></strong>: GUI fronted for the rysnc command line tool to synchronize or transfer data between locations</p>
<h3 id="additional-tools">Additional tools</h3>
Expand Down
2 changes: 1 addition & 1 deletion index.html
Original file line number Diff line number Diff line change
Expand Up @@ -193,5 +193,5 @@ <h2 id="licenses">Licenses</h2>

<!--
MkDocs version : 1.5.3
Build Date UTC : 2024-07-09 13:39:46.628442+00:00
Build Date UTC : 2024-07-09 13:55:47.708559+00:00
-->
2 changes: 1 addition & 1 deletion search/search_index.json

Large diffs are not rendered by default.

Binary file modified sitemap.xml.gz
Binary file not shown.

0 comments on commit 8673af8

Please sign in to comment.