Difference between pages "Text File (TXT)" and "Libesedb"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
m (Cleaning up spelling, minor rearrangement)
 
 
Line 1: Line 1:
'''Text file formats''' contain 8- or 16-bit characters that use printable characters along with some control data such as tabs and line feeds. [http://en.wikipedia.org/wiki/Text_file] Text files are split into several major types:
+
{{Infobox_Software |
* DOS/Windows format ends each line using Carriage Return (CR) or char(13) and a Line Feed (LF) char(10) byte sequence,
+
  name = libesedb |
* Unix format includes only the Carriage Return (CR) or char (13) at the end of the line.
+
  maintainer = [[Joachim Metz]] |
* Unicode includes an optional encoding in the first two bytes Byte Order Mark (BOM) that identifies the unicode encoding. This is mainly used to identify little endian or big endian byte order.
+
  os = [[Linux]], [[FreeBSD]], [[NetBSD]], [[OpenBSD]], [[Mac OS X]], [[Windows]] |
* EBCIDIC used char(15) for a new line. [http://en.wikipedia.org/wiki/EBCDIC]
+
  genre = {{Analysis}} |
 +
  license = {{LGPL}} |
 +
  website = [http://libesedb.sourceforge.net libesedb.sourceforge.net] |
 +
}}
  
They are usually [[ASCII]] encoded, although other encodings are possible to allow various language scripts to be used. Other encodings include EBCIDIC from the old IBM mainframe. Text files can have the [[MIME type]] "text/plain", often with suffixes indicating an encoding (e.g. "text/plain;charset=UTF-8".)  Any basic text reader can be used to view the contents of a simple text file, however some (notably Notepad) have issues with certain less popular encodings. Wordpad is included with windows and may display the files properly.  
+
'''libesedb''' is a library currently under development to read the [[Extensible Storage Engine (ESE) Database File (EDB) format | EDB File]] format. Intended for [[Linux]] systems, the library should also work on other platforms.
  
Translation of a DOS/Windows text file to Unix is performed by removing the Carriage Return from the end of the line.
+
The [[Extensible Storage Engine (ESE) Database File (EDB) format | EDB File]] format is used by many Microsoft application to store data such as Windows (Vista) Mail, Windows Search, Active Directory and
The reverse is simply the addition of the Carriage Return to the Line Feed. Files that have double spaces between the lines may have been improperly translated from one system to another.
+
Exchange.
  
Text files usually have the '''.txt''' extension. A number of file formats is actually "text files", but bear different extensions. For example is web documents ([[HTML]]-files) text files but is written with a specific syntax so the applications the files are designed to work with can read i correctly. Other kinds of files that can be seen as text files are source code files, xml, etc.
+
Several Windows applications use ESE to store its data:
 +
* Active Directory (NTDS)
 +
* File Replication service (FRS)
 +
* Windows Internet Name service (WINS)
 +
* DHCP
 +
* Security Configuration Engine (SCE)
 +
* Certificate Server
 +
* Terminal Services Session folder
 +
* Terminal Services Licensing service
 +
* Catalog database
 +
* Help and Support Services
 +
* Directory Synchronization service (MSDSS)
 +
* Remote Storage (RSS)
 +
* Phone Book service
 +
* Single Instance Store (SIS) Groveler
 +
* Windows NT Backup/Restore
 +
* Exchange store
 +
* Microsoft Exchange folder (SRS and DXA)
 +
* Key Management service (KMS)
 +
* Instant Messaging
 +
* Content Indexing
  
[[Category:File Formats]]
+
== External Links ==
 +
 
 +
* [http://libesedb.sourceforge.net/ Official web site]

Revision as of 08:05, 11 December 2010

libesedb
Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL
Website: libesedb.sourceforge.net

libesedb is a library currently under development to read the EDB File format. Intended for Linux systems, the library should also work on other platforms.

The EDB File format is used by many Microsoft application to store data such as Windows (Vista) Mail, Windows Search, Active Directory and Exchange.

Several Windows applications use ESE to store its data:

  • Active Directory (NTDS)
  • File Replication service (FRS)
  • Windows Internet Name service (WINS)
  • DHCP
  • Security Configuration Engine (SCE)
  • Certificate Server
  • Terminal Services Session folder
  • Terminal Services Licensing service
  • Catalog database
  • Help and Support Services
  • Directory Synchronization service (MSDSS)
  • Remote Storage (RSS)
  • Phone Book service
  • Single Instance Store (SIS) Groveler
  • Windows NT Backup/Restore
  • Exchange store
  • Microsoft Exchange folder (SRS and DXA)
  • Key Management service (KMS)
  • Instant Messaging
  • Content Indexing

External Links