http://www.forensicswiki.org/w/index.php?title=Miss_Identify&feed=atom&action=historyMiss Identify - Revision history2013-05-22T02:35:03ZRevision history for this page on the wikiMediaWiki 1.20.3http://www.forensicswiki.org/w/index.php?title=Miss_Identify&diff=8059&oldid=prevJessek: New page: {{Infobox_Software | name = Miss Identify | maintainer = Jesse Kornblum | os = {{Cross-platform}} | genre = Incident Response | license = {{GPL}} | website = [http://missid...2008-03-20T13:06:45Z<p>New page: {{Infobox_Software | name = Miss Identify | maintainer = <a href="/wiki/Jesse_Kornblum" title="Jesse Kornblum">Jesse Kornblum</a> | os = {{Cross-platform}} | genre = Incident Response | license = {{GPL}} | website = [http://missid...</p>
<p><b>New page</b></p><div>{{Infobox_Software |<br />
name = Miss Identify |<br />
maintainer = [[Jesse Kornblum]] |<br />
os = {{Cross-platform}} |<br />
genre = Incident Response |<br />
license = {{GPL}} |<br />
website = [http://missidentify.sourceforge.net/ missidentify.sourceforge.net/] |<br />
}}<br />
{{expand}}<br />
Miss Identify is a program to find Win32 applications. In its default mode it displays the filename of any executable that does not have an executable extension (i.e. exe, dll, com, sys, cpl, hxs, hxi, olb, rll, or tlb). The program can also be run to display all executables encountered, regardless of the extension. This is handy when looking for all of the executables on a drive. Other options allow the user to record the strings found in an executable and to work recursively.<br />
<br />
== Usage ==<br />
<br />
The program can be used to search for mislabeled executables:<br />
<br />
C:\> missidentify *<br />
C:\missidentify-1.0\sample.jpg<br />
<br />
To enumerate all executables:<br />
<br />
C:\> missidentify -a * <br />
C:\missidentify-1.0\sample.jpg<br />
C:\missidentify-1.0\missidentify.exe<br />
<br />
To search for all executables in an unusual place:<br />
<br />
C:\> missidentify -ar c:\windows\system32<br />
...<br />
C:\WINDOWS\System32\ntdll.dll<br />
C:\WINDOWS\System32\ntoskrnl.exe<br />
C:\WINDOWS\System32\NEVER-GONNA-CATCH-ME.EXE<br />
C:\WINDOWS\System32\ntver.dll<br />
...<br />
<br />
== External Links ==<br />
* [http://missidentify.sourceforge.net/ Official web site]</div>Jessek