ForensicsWiki will continue to operate as it has before and will not be shutting down. There may be some minor outages as we transition the site to new hardware, but we will try to minimize this as much as possible. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Talk:Tools:File Analysis"

From ForensicsWiki
Jump to: navigation, search
(Are file hash analysis tools suitable for this page?)
 
 
Line 1: Line 1:
 +
How about OS-specific "tools"?  Say, [http://developer.apple.com/documentation/Darwin/Reference/ManPages/man1/DeRez.1.html DeRez] under Mac OS X for resource fork meta data? --[[User:JohnJ|JohnJ]] 08:00, 4 September 2008 (UTC)
 +
 
Perhaps a few introductory words as to what kind of file analysis is intended would be helpful.
 
Perhaps a few introductory words as to what kind of file analysis is intended would be helpful.
 
I was looking for a mention of the http://www.fileadvisor.bit9.com service, and could not decide
 
I was looking for a mention of the http://www.fileadvisor.bit9.com service, and could not decide
 
if it was suitable for this page, or if it should go somewhere else. It's a collection of
 
if it was suitable for this page, or if it should go somewhere else. It's a collection of
 
file hashes, very useful for deciding if a file is reasonably well known by its file hash.[[User:Athulin|Athulin]] 02:41, 29 October 2007 (PDT)
 
file hashes, very useful for deciding if a file is reasonably well known by its file hash.[[User:Athulin|Athulin]] 02:41, 29 October 2007 (PDT)

Latest revision as of 08:00, 4 September 2008

How about OS-specific "tools"? Say, DeRez under Mac OS X for resource fork meta data? --JohnJ 08:00, 4 September 2008 (UTC)

Perhaps a few introductory words as to what kind of file analysis is intended would be helpful. I was looking for a mention of the http://www.fileadvisor.bit9.com service, and could not decide if it was suitable for this page, or if it should go somewhere else. It's a collection of file hashes, very useful for deciding if a file is reasonably well known by its file hash.Athulin 02:41, 29 October 2007 (PDT)