Difference between pages "Upcoming events" and "Document Metadata Extraction"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Conferences)
 
m (Images)
 
Line 1: Line 1:
<b>PLEASE READ BEFORE YOU EDIT THE LISTS BELOW</b><br>
+
Here are tools that will extract metadata from document files.
Events should be posted in the correct section, and in date order. An event should NEVER be listed in more than one section (i.e. Ongoing/Continuous events should not be listed in Scheduled Training).  When events begin the same day, events of a longer length should be listed first.  New postings of events with the same date(s) as other events should be added after events already in the list. If a provider offers the same event at several locations simultaneously, the listing should have a single (ONE) entry in the list with the date(s) and ALL locations for the event. Please use three-letter month abbreviations (i.e. Sep, NOT Sept. or September), use two digit dates (i.e. Jan 01 NOT Jan 1), and use date ranges rather than listing every date during an event(i.e. Jan 02-05, NOT Jan 02, 03, 04, 05).<br>
+
<i>Some events may be <u>limited</u> to <b>Law Enforcement Only</b> or to a specific audience.  Such restrictions should be noted when known.</i>
+
  
This is a BY DATE listing of upcoming events relevant to [[digital forensics]].  It is not an all inclusive list, but includes most well-known activities.  Some events may duplicate events on the generic [[conferences]] page, but entries in this list have specific dates and locations for the upcoming event.
+
=Office Files=
  
This listing is divided into four sections (described as follows):<br>
+
; [[antiword]]
<ol><li><b><u>Calls For Papers</u></b> - Calls for papers for either Journals or for Conferences, relevant to Digital Forensics (Name, Closing Date, URL)</li><br>
+
: http://www.winfield.demon.nl/
<li><b><u>Conferences</u></b> - Conferences relevant for Digital Forensics (Name, Date, Location, URL)</li><br>
+
<li><b><u>On-Going / Continuous Training</u></b> - Training opportunities that are either always available online/distance learning format (start anytime) or that are offered the same time every month (Name, date-if applicable, URL)</li><br>
+
<li><b><u>[[Scheduled Training Courses]]</u></b> - Training Classes/Courses that are scheduled for specific dates/locations. This would include online (or distance learning format) courses which begin on specific dates, instead of the "start anytime" courses listed in the previous section. (Provider, URL) (''note: this has been moved to its own page.'')<br></li></ol>
+
  
The Conference and Training List is provided by the American Academy of Forensic Sciences (AAFS) Digital and Multimedia Sciences Section Listserv. 
+
; [[catdoc]]
<i> (Subscribe by sending an email to listserv@lists.mitre.org with message body containing SUBSCRIBE AAFS-DIGITAL-MULTIMEDIA-LIST)</i>
+
: http://www.45.free.net/~vitus/software/catdoc/
Requests for additions, deletions or corrections to this list may be sent by email to David Baker <i>(bakerd AT mitre.org)</i>.
+
  
== Calls For Papers ==
+
; [[laola]]
Please help us keep this up-to-date with deadlines for upcoming conferences that would be appropriate for forensic research.
+
: http://user.cs.tu-berlin.de/~schwartz/pmh/index.html
  
{| border="0" cellpadding="2" cellspacing="2" align="top"
+
; [[word2x]]
|- style="background:#bfbfbf; font-weight: bold"
+
: http://word2x.sourceforge.net/
! width="30%|Title
+
! width="15%"|Due Date
+
! width="15%"|Notification Date
+
! width="40%"|Website
+
|-
+
|International Conference on Technical and Legal Aspects of the e-Society
+
|Oct 05, 2009
+
|Nov 07, 2009
+
|http://www.iaria.org/conferences2010/CfPCYBERLAWS10.html
+
|-
+
|Third International Workshop on Digital Forensics (WSDF 2010)
+
|Oct 15, 2009
+
|Nov 01, 2009
+
|http://www.ares-conference.eu/conf/index.php/workshops/wsdf
+
|-
+
|IEEE Symposium on Security and Privacy 2010
+
|Nov 18, 2009
+
|Feb 01, 2010
+
|http://oakland31.cs.virginia.edu/cfp.html
+
|-
+
|ShmooCon 2010
+
|Nov 20, 2009
+
|Dec 15, 2010
+
|http://www.shmoocon.org/cfp.html
+
|-
+
|AusCERT Conference 2010
+
|Dec 2009
+
|Jan 2010
+
|http://conference.auscert.org.au/conf2010/cfp2010.html
+
|-
+
|2010 IEEE International Conference on Technologies for Homeland Security
+
|Apr 24, 2010
+
|
+
|http://ieee-hst.org/
+
|-
+
|}
+
  
== Conferences ==
+
; [[wvWare]]
{| border="0" cellpadding="2" cellspacing="2" align="top"
+
: http://wvware.sourceforge.net/
|- style="background:#bfbfbf; font-weight: bold"
+
: Extracts metadata from various [[Microsoft]] Word files ([[doc]]). Can also convert doc files to other formats such as HTML or plain text.
! width="40%"|Title
+
! width="20%"|Date/Location
+
! width="40%"|Website
+
|-
+
|6th International Workshop on Visualization for Cyber Security
+
|Oct 11<br>Atlantic City, NJ
+
|http://vizsec.org/vizsec2009/
+
|-
+
|Evidence in the Information Age
+
|Oct 23-24<br>Duquesne University, Pittsburgh, PA
+
|http://www.forensics.duq.edu/conference/conferencefront.html
+
|-
+
|Techno Forensics & Digital Investigations Conference
+
|Oct 26-28<br>Gaithersburg, MD
+
|http://www.techsec.com/html/TechnoForensics2009.html
+
|-
+
|USENIX Large Installation System Administration Conference (LISA)
+
|Nov 01-06<br>Baltimore, MD
+
|http://www.usenix.org/events/lisa09/
+
|-
+
|Paraben Forensic Innovation Conference
+
|Nov 08-11<br>Park City, UT
+
|http://www.pfic2009.com
+
|-
+
|16th ACM Conference on Computer and Communications Security
+
|Nov 09-13<br>Chicago, IL
+
|http://www.sigsac.org/ccs/CCS2009/index.shtml
+
|-
+
|ACM Cloud Computing Security Workshop
+
|Nov 13<br>Chicago, IL
+
|http://crypto.cs.stonybrook.edu/ccsw09/
+
|-
+
|DeepSec In-Depth Security Conference
+
|Nov 17-20<br>Vienna, Austria
+
|https://deepsec.net/
+
|-
+
|First IEEE Workshop on Information Forensics and Security
+
|Dec 06-09<br>London, England
+
|http://www.wifs09.org/
+
|-
+
|International Organization on Computer Evidence (IOCE) Annual Conference 2009
+
|Dec 09-11<br>Tokyo, Japan
+
|http://www.ioce.org/core.php?ID=21
+
|-
+
|2009 International Workshop on Security in Cloud Computing
+
|Dec 12-14<br>Sichuan, China
+
|http://bingweb.binghamton.edu/~ychen/SCC09.htm
+
|-
+
|2nd Workshop on Information and Data Assurance
+
|Dec 14-16<br>Phoenix, AZ
+
|http://ipccc.org/ipccc2009/main.php?page=6#workshop3
+
|-
+
|DoD Cyber Crime Conference
+
|Jan 22-29<br>St. Louis, MO
+
|http://www.dodcybercrime.com/10CC/
+
|-
+
|ShmooCon VI
+
|Feb 05-07<br>Washington, DC
+
|http://www.shmoocon.org
+
|-
+
|International Conference on Technical and Legal Aspects of the e-Society
+
|Feb 10-15<br>St. Maarten, Netherlands Antilles
+
|http://www.iaria.org/conferences2010/CYBERLAWS10.html
+
|-
+
|American Academy of Forensic Sciences Annual Meeting
+
|Feb. 22-27<br>Seattle, WA
+
|http://www.aafs.org/default.asp?section_id=meetings&page_id=aafs_annual_meeting
+
|-
+
|RSA Conference 2010
+
|Mar 01-05<br>San Francisco, CA
+
|http://www.rsaconference.com/2010/usa/index.htm
+
|-
+
|31st IEEE Symposium on Security and Privacy
+
|May 16-19<br>Oakland, CA
+
|http://oakland31.cs.virginia.edu/
+
|-
+
|VB2010 Fighting malware and spam
+
|Sep 29 - Oct 01<br>Vancouver, BC, Canada
+
|http://www.virusbtn.com/conference/vb2010/
+
|-
+
|2010 IEEE International Conference on Technologies for Homeland Security
+
|Nov 08-10<br>Waltham, MA
+
|http://ieee-hst.org/
+
|-
+
|}
+
  
== On-going / Continuous Training ==
+
; [[Outside In]]
{| border="0" cellpadding="2" cellspacing="2" align="top"
+
: http://www.oracle.com/technology/products/content-management/oit/oit_all.html
|- style="background:#bfbfbf; font-weight: bold"
+
: Originally developed by Stellant, supports hundreds of file types.
! width="40%"|Title
+
! width="20%"|Date/Location
+
! width="40%"|Website
+
|-
+
|- style="background:pink;align:left"
+
! DISTANCE LEARNING
+
|-
+
|Basic Computer Examiner Course - Computer Forensic Training Online
+
|Distance Learning Format
+
|http://www.cftco.com
+
|-
+
|Linux Data Forensics Training
+
|Distance Learning Format
+
|http://www.crazytrain.com/training.html
+
|-
+
|SANS On-Demand Training
+
|Distance Learning Format
+
|http://www.sans.org/ondemand/?portal=69456f95660ade45be29c00b0c14aea1
+
|-
+
|Champlain College - CCE Course
+
|Online / Distance Learning Format
+
|http://extra.champlain.edu/cps/wdc/alliances/cce/landing/
+
|-
+
|Las Positas College
+
|Online Computer Forensics Courses
+
|http://www.laspositascollege.edu
+
|-
+
|- style="background:pink;align:left"
+
!RECURRING TRAINING
+
|-
+
|MaresWare Suite Training
+
|First full week every month<br>Atlanta, GA
+
|http://www.maresware.com/maresware/training/maresware.htm
+
|-
+
|Evidence Recovery for Windows Vista&trade;
+
|First full week every month<br>Brunswick, GA
+
|http://www.internetcrimes.net
+
|-
+
|Evidence Recovery for Windows Server&reg; 2003 R2
+
|Second full week every month<br>Brunswick, GA
+
|http://www.internetcrimes.net
+
|-
+
|Evidence Recovery for the Windows XP&trade; operating system
+
|Third full week every month<br>Brunswick, GA
+
|http://www.internetcrimes.net
+
|-
+
|Computer Forensics Training and CCE&trade; Testing for Litigation Support Professionals
+
|Third weekend of every month(Fri-Mon)<br>Dallas, TX
+
|http://www.md5group.com
+
|-
+
|}
+
  
==See Also==
+
; [[FI Tools]]
* [[Scheduled Training Courses]]
+
: http://forensicinnovations.com/
==References==
+
: More than 100 file types.
* [http://faculty.cs.tamu.edu/guofei/sec_conf_stat.htm Computer Security Conference Ranking and Statistic]
+
 
* [http://www.kdnuggets.com/meetings/ Meetings and Conferences in Data Mining and Discovery]
+
=PDF Files=
* http://www.conferencealerts.com/data.htm Data Mining Conferences World-Wide]
+
 
 +
; [[xpdf]]
 +
: http://www.foolabs.com/xpdf/
 +
: [[pdfinfo]] (part of the [[xpdf]] package) displays some metadata of [[PDF]] files.
 +
 
 +
 
 +
(See [[PDF]])
 +
 
 +
=Images=
 +
 
 +
; [[jhead]]
 +
: http://www.sentex.net/~mwandel/jhead/
 +
: Displays or modifies [[Exif]] data in [[JPEG]] files.
 +
 
 +
; [[vinetto]]
 +
: http://vinetto.sourceforge.net/
 +
: Examines [[Thumbs.db]] files.
 +
 
 +
;[[libexif]]
 +
: http://sourceforge.net/projects/libexif EXIF tag Parsing Library
 +
 
 +
; [[Adroit Photo Forensics]]
 +
: http://digital-assembly.com/products/adroit-photo-forensics/
 +
: Displays meta data and uses date and camera meta-data for grouping, timelines etc.
 +
 
 +
; Exif Viewer
 +
: http://araskin.webs.com/exif/exif.html
 +
: Add-on for Firefox and Thunderbird that displays various [[JPEG]]/JPG metadata in local and remote images.
 +
 
 +
=General=
 +
These general-purpose programs frequently work when the special-purpose programs fail, but they generally provide less detailed information.
 +
 
 +
; [[Metadata Extraction Tool]]
 +
: "Developed by the National Library of New Zealand to programmatically extract preservation metadata from a range of file formats like PDF documents, image files, sound files Microsoft office documents, and many others."
 +
: http://meta-extractor.sourceforge.net/
 +
 
 +
; [[Metadata Assistant]]
 +
: http://www.payneconsulting.com/products/metadataent/
 +
 
 +
; [[hachoir|hachoir-metadata]]
 +
: Extraction tool, part of '''[[Hachoir]]''' project
 +
 
 +
; [[file]]
 +
: The UNIX '''file''' program can extract some metadata
 +
 
 +
; [[GNU libextractor]]
 +
: http://gnunet.org/libextractor/ The libextractor library is a plugable system for extracting metadata
 +
 
 +
; [[Directory Lister Pro]]
 +
: Directory Lister Pro is a Windows tool which creates listings of files from selected directories on hard disks, CD-ROMs, DVD-ROMs, floppies, USB storages and network shares. Listing can be in HTML, text or CSV format (for easy import to Excel). Listing can contain standard file information like file name, extension, type, owner and date created, but especially for forensic analysis file meta data can be extracted from various formats: 1) executable file information (EXE, DLL, OCX) like file version, description, company, product name. 2) multimedia properties (MP3, AVI, WAV, JPG, GIF, BMP, MKV, MKA, MPEG) like track, title, artist, album, genre, video format, bits per pixel, frames per second, audio format, bits per channel. 3) Microsoft Office files (DOC, DOCX, XLS, XLSX, PPT, PPTX) like document title, author, keywords, word count. For each file and folder it is also possible to obtain its CRC32, MD5, SHA-1 and Whirlpool hash sum. Extensive number of options allows to completely customize the visual look of the output. Filter on file name, date, size or attributes can be applied so it is possible to limit the files listed.
 +
: http://www.krksoft.com
 +
 
 +
[[Category:Tools]]

Revision as of 08:43, 9 April 2010

Here are tools that will extract metadata from document files.

Office Files

antiword
http://www.winfield.demon.nl/
catdoc
http://www.45.free.net/~vitus/software/catdoc/
laola
http://user.cs.tu-berlin.de/~schwartz/pmh/index.html
word2x
http://word2x.sourceforge.net/
wvWare
http://wvware.sourceforge.net/
Extracts metadata from various Microsoft Word files (doc). Can also convert doc files to other formats such as HTML or plain text.
Outside In
http://www.oracle.com/technology/products/content-management/oit/oit_all.html
Originally developed by Stellant, supports hundreds of file types.
FI Tools
http://forensicinnovations.com/
More than 100 file types.

PDF Files

xpdf
http://www.foolabs.com/xpdf/
pdfinfo (part of the xpdf package) displays some metadata of PDF files.


(See PDF)

Images

jhead
http://www.sentex.net/~mwandel/jhead/
Displays or modifies Exif data in JPEG files.
vinetto
http://vinetto.sourceforge.net/
Examines Thumbs.db files.
libexif
http://sourceforge.net/projects/libexif EXIF tag Parsing Library
Adroit Photo Forensics
http://digital-assembly.com/products/adroit-photo-forensics/
Displays meta data and uses date and camera meta-data for grouping, timelines etc.
Exif Viewer
http://araskin.webs.com/exif/exif.html
Add-on for Firefox and Thunderbird that displays various JPEG/JPG metadata in local and remote images.

General

These general-purpose programs frequently work when the special-purpose programs fail, but they generally provide less detailed information.

Metadata Extraction Tool
"Developed by the National Library of New Zealand to programmatically extract preservation metadata from a range of file formats like PDF documents, image files, sound files Microsoft office documents, and many others."
http://meta-extractor.sourceforge.net/
Metadata Assistant
http://www.payneconsulting.com/products/metadataent/
hachoir-metadata
Extraction tool, part of Hachoir project
file
The UNIX file program can extract some metadata
GNU libextractor
http://gnunet.org/libextractor/ The libextractor library is a plugable system for extracting metadata
Directory Lister Pro
Directory Lister Pro is a Windows tool which creates listings of files from selected directories on hard disks, CD-ROMs, DVD-ROMs, floppies, USB storages and network shares. Listing can be in HTML, text or CSV format (for easy import to Excel). Listing can contain standard file information like file name, extension, type, owner and date created, but especially for forensic analysis file meta data can be extracted from various formats: 1) executable file information (EXE, DLL, OCX) like file version, description, company, product name. 2) multimedia properties (MP3, AVI, WAV, JPG, GIF, BMP, MKV, MKA, MPEG) like track, title, artist, album, genre, video format, bits per pixel, frames per second, audio format, bits per channel. 3) Microsoft Office files (DOC, DOCX, XLS, XLSX, PPT, PPTX) like document title, author, keywords, word count. For each file and folder it is also possible to obtain its CRC32, MD5, SHA-1 and Whirlpool hash sum. Extensive number of options allows to completely customize the visual look of the output. Filter on file name, date, size or attributes can be applied so it is possible to limit the files listed.
http://www.krksoft.com