Difference between pages "ForensicSoft" and "Libesedb"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
(Created page with '''ForensicSoft Inc'' ForensicSoft's System Acquisition Forensic Environment (SAFE) products use innovative thinking to bring the speed, reliability, and convenience of software w…')
 
 
Line 1: Line 1:
''ForensicSoft Inc'' ForensicSoft's System Acquisition Forensic Environment (SAFE) products use innovative thinking to bring the speed, reliability, and convenience of software write blocking to the protection of digital evidence. Their products include:
+
{{Infobox_Software |
* [[SAFE Boot Disk]], The first and only commercially available forensically sound windows boot disk
+
  name = libesedb |
* [[SAFE Block XP]], A Windows XP software write blocker which replaces the need for hardware write blocker.
+
  maintainer = [[Joachim Metz]] |
 +
  os = [[Linux]], [[FreeBSD]], [[NetBSD]], [[OpenBSD]], [[Mac OS X]], [[Windows]] |
 +
  genre = {{Analysis}} |
 +
  license = {{LGPL}} |
 +
  website = [http://libesedb.sourceforge.net libesedb.sourceforge.net] |
 +
}}
  
== Trivia ==
+
'''libesedb''' is a library currently under development to read the [[Extensible Storage Engine (ESE) Database File (EDB) format | EDB File]] format. Intended for [[Linux]] systems, the library should also work on other platforms.
  
ForensicSoft's  System Acquisition Forensic Environment (SAFE) is the first and only commercially available Windows boot disk and incorporates built in NTFS support, driver availability, and built in write blocking.
+
The [[Extensible Storage Engine (ESE) Database File (EDB) format | EDB File]] format is used by many Microsoft application to store data such as Windows (Vista) Mail, Windows Search, Active Directory and
 +
Exchange.
  
== External Links ==
+
Several Windows applications use ESE to store its data:
 +
* Active Directory (NTDS)
 +
* File Replication service (FRS)
 +
* Windows Internet Name service (WINS)
 +
* DHCP
 +
* Security Configuration Engine (SCE)
 +
* Certificate Server
 +
* Terminal Services Session folder
 +
* Terminal Services Licensing service
 +
* Catalog database
 +
* Help and Support Services
 +
* Directory Synchronization service (MSDSS)
 +
* Remote Storage (RSS)
 +
* Phone Book service
 +
* Single Instance Store (SIS) Groveler
 +
* Windows NT Backup/Restore
 +
* Exchange store
 +
* Microsoft Exchange folder (SRS and DXA)
 +
* Key Management service (KMS)
 +
* Instant Messaging
 +
* Content Indexing
  
[http://www.ForensicSoft.com/ Official Website]
+
== External Links ==
  
[[Category:Vendors]]
+
* [http://libesedb.sourceforge.net/ Official web site]

Revision as of 08:05, 11 December 2010

libesedb
Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Analysis
License: LGPL
Website: libesedb.sourceforge.net

libesedb is a library currently under development to read the EDB File format. Intended for Linux systems, the library should also work on other platforms.

The EDB File format is used by many Microsoft application to store data such as Windows (Vista) Mail, Windows Search, Active Directory and Exchange.

Several Windows applications use ESE to store its data:

  • Active Directory (NTDS)
  • File Replication service (FRS)
  • Windows Internet Name service (WINS)
  • DHCP
  • Security Configuration Engine (SCE)
  • Certificate Server
  • Terminal Services Session folder
  • Terminal Services Licensing service
  • Catalog database
  • Help and Support Services
  • Directory Synchronization service (MSDSS)
  • Remote Storage (RSS)
  • Phone Book service
  • Single Instance Store (SIS) Groveler
  • Windows NT Backup/Restore
  • Exchange store
  • Microsoft Exchange folder (SRS and DXA)
  • Key Management service (KMS)
  • Instant Messaging
  • Content Indexing

External Links