bulk_extractor
bulk_extractor is a high-performance digital forensics exploitation tool that rapidly scans any kind of input and extracts structured information such as email addresses, credit card numbers, JPEGs, and JSON snippets without parsing the file system or file system structures. The results are stored in text files that are easily inspected, searched, or used as inputs for other forensic processing. bulk_extractor also creates histograms of certain kinds of features that it finds, such as Google search terms and email addresses, as previous research has shown that such histograms are especially useful in investigative and law enforcement applications. Unlike other digital forensics tools, bulk_extractor probes every byte of data to see if it is the start of a sequence that can be decompressed or otherwise decoded. If so, the decoded data are recursively re-examined. As a result, bulk_extractor can find things like BASE64-encoded JPEGs and compressed JSON objects that traditional carving tools miss. This is the bulk_extractor 2.1 development branch! It is reliable, but if you want to have a well-tested product.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A command line utility for managing volume shadow copies with capabilities for evasion, persistence, and file extraction.
A library to access and parse OLE 2 Compound File (OLECF) format files.
A portable volatile memory acquisition tool for Linux.
A tool for collecting and analyzing screenshots from remote desktop protocols, web applications, and VNC connections.
An open source digital forensic tool for processing and analyzing digital evidence with high performance and multiplatform support.
A Cross-Platform Forensic Framework for Google Chrome that allows investigation of history, downloads, bookmarks, cookies, and provides a full report.
A binary analysis platform for analyzing binary programs
TestDisk is a free data recovery software that can recover lost partitions and undelete files from various file systems.
Tool for live forensics acquisition on Windows systems, collecting artefacts for early compromise detection.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.