Difference between pages "CarvFs" and "Converting Binary Plists"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
 
 
Line 1: Line 1:
{{Infobox_Software |
+
Binary plists are the files that Apple products use to store information. The easiest way to view them is to convert them to xml.
  name = CarvFs |
+
  maintainer = [[KLPD]] |
+
  os = [[Linux]] |
+
  genre = {{Analysis}} |
+
  license = {{GPL}}, {{LGPL}} |
+
  website = [https://sourceforge.net/projects/carvpath/ sourceforge.net/projects/carvpath/] |
+
}}
+
  
CarvFs is a modular [[Fuse]] based user space file system on top of [[LibCarvPath]].  
+
The program plutil is native to OSX (as of 10.2), however it is also included when iTunes is installed on a Windows PC.
CarvFS makes CarvPath style annotations as used by LibCarvPath available as files.
+
Using CarvFs makes it possible to process carved entities as files without the need for copy-out.
+
  
CarvFs is modular with respect to access to image files.
+
plutil on a Windows PC is stored in:
The CarvFs distribution comes with a default module for access to [[Raw Image Format|(split) raw files]].
+
  
A separate [[Libewf]] module is available for access to [[Encase image file format|EWF images]].
+
  ''Program Files (x86)\Common Files\Apple\Apple Application Support''
  
== External Links ==
+
Which can be added to the PATH in Environmental variables so plutil can be run from anywhere
* [http://sourceforge.net/apps/mediawiki/carvpath/ CarvPath wiki]
+
 
 +
To convert Binary plists to XML run the command:
 +
  '''plutil -convert xml1 file.plist'''
 +
 
 +
 
 +
 
 +
 
 +
 
 +
== Links ==
 +
plutil man page - [[http://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPages/man1/plutil.1.html]]

Revision as of 19:27, 9 September 2011

Binary plists are the files that Apple products use to store information. The easiest way to view them is to convert them to xml.

The program plutil is native to OSX (as of 10.2), however it is also included when iTunes is installed on a Windows PC.

plutil on a Windows PC is stored in:

 Program Files (x86)\Common Files\Apple\Apple Application Support

Which can be added to the PATH in Environmental variables so plutil can be run from anywhere

To convert Binary plists to XML run the command:

 plutil -convert xml1 file.plist



Links

plutil man page - [[1]]