|
|
| Line 1: |
Line 1: |
| − | {{Infobox_Software |
| + | Aside from "text cannot be extracted from Arabic PDFs" I'm not sure what this page says. Could somebody please de-geek it a little bit? [[User:Jessek|Jessek]] 15:46, 7 March 2009 (UTC) |
| − | name = Mac Marshal|
| + | |
| − | maintainer = [[ATC-NY]] |
| + | |
| − | os = {{Mac OS X}} |
| + | |
| − | genre = {{Macintosh forensics}} |
| + | |
| − | license = Commercial (free to law enforcement) |
| + | |
| − | website = [http://www.macmarshal.com/ macmarshal.com] |
| + | |
| − | }}
| + | |
| | | | |
| − | Mac Marshal is a tool to analyze Mac OS X file system images. It scans a Macintosh disk image, automatically detects and displays Macintosh and Windows operating systems and virtual machine images, then runs a number of analysis tools on the image to extract Mac OS X-specific forensic evidence written by the OS and common applications.
| + | :I tried a bit. Is this better? [[User:Simsong|Simsong]] 12:39, 8 March 2009 (UTC) |
| − | | + | |
| − | Mac Marshal follows forensic best practices and maintains a detailed log file of all activities it performs. It produces reports in RTF, PDF, and HTML formats, and runs on Mac OS X-based analysis machines.
| + | |
| − | | + | |
| − | Version 1.0 was released in January 2009, available at no cost to US law enforcement, with a commercial version available to non-law enforcement.
| + | |
| − | | + | |
| − | =Authors=
| + | |
| − | Mac Marhsal was developed by ATC-NY, supported by a contract with the US National Institute of Justice (NIJ). The project was originally named MEGA.
| + | |
| − | | + | |
| − | = External Links =
| + | |
| − | * [http://www.dfrws.org/2008/proceedings/p83-joyce.pdf DFRWS'08 Mac Marshal paper (pdf)]
| + | |
| − | * [http://www.macmarshal.com/ www.macmarshal.com]
| + | |
| − | * [http://www.atc-nycorp.com/ ATC-NY]
| + | |
| − | | + | |
| − | [[Category:Macintosh forensics tools]]
| + | |
Revision as of 07:39, 8 March 2009
Aside from "text cannot be extracted from Arabic PDFs" I'm not sure what this page says. Could somebody please de-geek it a little bit? Jessek 15:46, 7 March 2009 (UTC)
- I tried a bit. Is this better? Simsong 12:39, 8 March 2009 (UTC)
