Difference between pages "AppleDouble header file" and "Libmsiecf"
From Forensics Wiki
(Difference between pages)
m (can't figure we'd need to duplicate the wikipedia Resource Fork article locally) |
Joachim Metz (Talk | contribs) (→History) |
||
| Line 1: | Line 1: | ||
| − | + | {{Infobox_Software | | |
| + | name = libmsiecf | | ||
| + | maintainer = [[Joachim Metz]] | | ||
| + | os = [[Linux]], [[FreeBSD]], [[NetBSD]], [[OpenBSD]], [[Mac OS X]], [[Windows]] | | ||
| + | genre = {{Analysis}} | | ||
| + | license = {{LGPL}} | | ||
| + | website = [http://libmsiecf.sourceforge.net libmsiecf.sourceforge.net] | | ||
| + | }} | ||
| − | + | The '''libmsiecf''' package contains a library and applications to read the [[Internet Explorer History File Format | MSIE Cache File]] format. | |
| − | == | + | == Tools == |
| + | The libmsiecf package contains the following tools: | ||
| + | * '''msiecfexport''', which exports the items stored in MSIECF files. | ||
| + | * '''msiecfinfo''', which shows the information about MSIECF files. | ||
| − | + | == Examples == | |
| − | + | ||
| − | + | ||
| − | + | Exporting items from an index.dat: | |
| − | + | <pre> | |
| + | msiecfexport -m items index.dat | ||
| + | </pre> | ||
| − | + | Exporting recovered items from an index.dat: | |
| − | + | <pre> | |
| + | msiecfexport -m recovered index.dat | ||
| + | </pre> | ||
| − | [[ | + | Exporting an index.dat from a Chinese Windows installation: |
| + | <pre> | ||
| + | msiecfexport -c windows-936 index.dat | ||
| + | </pre> | ||
| + | |||
| + | == History == | ||
| + | Libmsiecf was created by [[Joachim Metz]] in 2009, while working for [http://en.hoffmannbv.nl/ Hoffmann Investigations]. | ||
| + | |||
| + | Libmsiecf is a rewrite of [http://sourceforge.net/projects/odessa/ pasco] with support for more recent versions of [[Internet Explorer History File Format | MSIE Cache Files]] | ||
| + | |||
| + | == See Also == | ||
| + | * [[Internet Explorer History File Format | MSIE Cache Files]] | ||
| + | |||
| + | == External Links == | ||
| + | * [http://code.google.com/p/libmsiecf/ Project site] | ||
| + | * [http://libmsiecf.sourceforge.net/ Old project site] | ||
Revision as of 02:23, 26 August 2012
| libmsiecf | |
|---|---|
| Maintainer: | Joachim Metz |
| OS: | Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows |
| Genre: | Analysis |
| License: | LGPL |
| Website: | libmsiecf.sourceforge.net |
The libmsiecf package contains a library and applications to read the MSIE Cache File format.
Contents |
Tools
The libmsiecf package contains the following tools:
- msiecfexport, which exports the items stored in MSIECF files.
- msiecfinfo, which shows the information about MSIECF files.
Examples
Exporting items from an index.dat:
msiecfexport -m items index.dat
Exporting recovered items from an index.dat:
msiecfexport -m recovered index.dat
Exporting an index.dat from a Chinese Windows installation:
msiecfexport -c windows-936 index.dat
History
Libmsiecf was created by Joachim Metz in 2009, while working for Hoffmann Investigations.
Libmsiecf is a rewrite of pasco with support for more recent versions of MSIE Cache Files
