Software for Computer Forensics

Other Software (6)

DPR - Decompression tool for docx files

DPR is a tool that will decompress the docx file and import the files into an XML platform and extract the information from the app.xml, core.xml and document.xml all within one GUI. The document data is exported raw so don't expect the correct pagination. An instructions PDF accompanies the download.

MD5:26A1F383D8CDEAD81B65DC81CF0DC8A1

Cliff - A GUI to mount and image Volume Shadows (almost!)

Cliff has been developed to produce a functional tool to mount the Volume Shadows from a Windows Vista or Seven OS. The mounting is completly GUI , but the imaging function relies on calling up the CMD to execute and monitor the output from the DD command. The only interaction with the user is to paste one set of data and press Enter. Please read the Instructions before using the tool.

MD5:8A1C7CD0B8F34A5F88AD3A45B9B02FE6

MLR - A tool to read paired values from Mac log files.

My colleague was dealing with a case where he wanted to view varying types of logs (.log) files produced by a Mac. The majority of the files contain paired values, which when viewed in Notepad appear as contiguous strings. Included in the release is a Disk Utility log from a Mac.

MD5:0ED53F596DCC16CDBC522E14599802FA

ESP - Read in the history files from the MS Enhancement Pack

ESP will read in the search history stored in the toolbar component of the Windows Live Toolbar. In the accompanying PDF are the locations of the files in Windows XP to Windows Seven if the component is installed. If your file is named 'searchhs.dat' use ESPv2, otherwise use ESP.

You are viewing the text version of this site.

To view the full version please install the Adobe Flash Player and ensure your web browser has JavaScript enabled.

Need help? check the requirements page.


Get Flash Player