Difference between pages "SubRosaSoft Inc." and "Windows SuperFetch Format"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
(FileSalvage: - Moved to separate page)
 
(File header)
 
Line 1: Line 1:
SubRosaSoft is the developer of [[MacForensicsLab]] and several other [[OS X]] software titles including [[FileSalvage]], [[CopyCatX]], and [[VolumeWorks]]. Based in Union City, California.  and founded in 2002 they specialize in privacy related and system utilities. Their design philosophy revolves around easy-to-use yet extremely powerful software.  They have produced security, file and device management, home security, forensics, and data and device recovery.  Their users range from entry-level Mac users and hobbyists to system administrators, consultants, and forensics professionals.
+
{{expand}}
+
  
= Law Enforcement and Investigation Products =
+
== MEMO file ==
 +
Some of the <tt>Ag*.db</tt> files are MEMO files.
  
== MacForensicsLab ==
+
The MEMO file consists of:
 +
* file header
 +
* compressed blocks
  
 +
=== File header ===
 +
The file header is 84 bytes of size and consists of:
 +
{| class="wikitable"
 +
|-
 +
! Offset
 +
! Size
 +
! Value
 +
! Description
 +
|-
 +
| 0
 +
| 4
 +
| 0x304D454D ("MEM0") or 0x4F4D454D ("MEMO")
 +
| Signature
 +
|-
 +
| 4
 +
| 4
 +
|
 +
| Uncompressed (total) data size
 +
|-
 +
|}
  
 +
=== Compressed blocks ===
 +
The file header is followed by compressed blocks:
 +
{| class="wikitable"
 +
|-
 +
! Offset
 +
! Size
 +
! Value
 +
! Description
 +
|-
 +
| 0
 +
| 4
 +
|
 +
| Compressed data size
 +
|-
 +
| 4
 +
| ...
 +
|
 +
| Compressed data
 +
|-
 +
|}
  
= Consumer Products =
+
=== Uncompressed data ===
 +
<b>TODO</b>
  
 +
== TRX file ==
 +
The <tt>Ag*.db.trx</tt> files are TRX files.
  
 +
<b>Note that the following format specification is incomplete.</b>
  
== CopyCatX ==
+
=== File header ===
 +
The file header is 84 bytes of size and consists of:
 +
{| class="wikitable"
 +
|-
 +
! Offset
 +
! Size
 +
! Value
 +
! Description
 +
|-
 +
| 0
 +
| 4
 +
| 1
 +
| Unknown (Version?)
 +
|-
 +
| 4
 +
| 4
 +
|
 +
| Unknown
 +
|-
 +
| 8
 +
| 4
 +
|
 +
| File size
 +
|-
 +
| 12
 +
| 4
 +
|
 +
| Unknown (Record count?)
 +
|-
 +
| 16
 +
| 4
 +
|
 +
| Unknown (Record count?)
 +
|-
 +
| 20
 +
| 4
 +
|
 +
| Unknown (Records offset or file header size)
 +
|-
 +
|}
  
[http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=7 CopyCatX] allows you to create exact duplicates of your hard drive, Apple iPod, or Mac OS X startup drive. [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=7 CopyCatX] is the fastest way to duplicate devices in most formats on your Apple Macintosh computer.
+
== See Also ==
 +
* [[SuperFetch]]
  
The fastest software duplication system for Mac OS X. [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=7 CopyCatX] is extremely fast. It works on drives that other systems cannot recover by using our proprietary resumable/fault tolerant algorithms.
+
== External Links ==
 +
* [http://blog.rewolf.pl/blog/?p=214 Windows SuperFetch file format – partial specification], by ReWolf, October 5, 2011
  
Backups include every single detail of the original including permissions, icons, placement, and content.
+
[[Category:File Formats]]
 
+
Unlike most backup programs which copy file-by-file, [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=7 CopyCatX] utilizes a method called device copying. Device copying enables you to retain every detail of the original volume. It's a lot faster than the traditional method of backing up file-by-file. When duplicating a volume, [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=7 CopyCatX] is smart enough to skip all the blank space of a drive during the copying process to further improve the speed.
+
 
+
== VolumeWorks ==
+
 
+
[http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=6 VolumeWorks] is an extremely powerful OS X software application for managing the partitions on your hard drive. VolumeWorks is designed to allow the end user the ability to:
+
 
+
* Rebuild a partition table
+
* Add partitions to a device
+
* Hide partitions
+
* Shift partitions
+
* Resize partitions
+
 
+
= Free Products =
+
 
+
== DasBoot ==
+
 
+
[http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=193 DasBoot]  Do you have a shiny new flash drive, or multi use storage device in your pocket ? Now you can turn it into a Mac OS X diagnostic, repair, and maintenance tool. DasBoot allows you to take any third party boot CD (such as those shipped by SubRosaSoft.com Inc, Prosoft Engineering Inc, Alsoft Inc, or Micromat Inc) and quickly create a bootable diagnostic device that contains any of your own utilities you may wish to install.
+
 
+
You can use your device to boot and repair Mac OS X computers* as needed without erasing it and taking away your ability to use it for other purposes such as playing music, or watching videos. With the help of DasBoot™ you get to carry all the tools you'll need with you. But unlike expensive third party alternatives, you'll have plenty of space left over in case you need to recover data.
+
 
+
DasBoot™ devices run software much faster than a CD/DVD repair disk. In addition you can re-configure the device at any time to add new utilities, updated versions of software or newer versions of Mac OS X.
+
 
+
== MusicRenamer ==
+
 
+
[http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=186 MusicRenamer] is Mac OS X software to quickly and easily rename large numbers of music files. [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=186 MusicRenamer] is a powerful mp3 file renaming tool. It helps to avoid spending hours of hard boring manual editing of mp3 filenames. You will rename your mp3 filenames easier and faster and...you'll see your mp3 list with consistent order in filenames. The renamer converts easily any rare and strange filename to a simple format containing the album name, track number, artist and title. You will be asked to select a folder that contains MP3, AAC, M4A, or M4P files. These files will be renamed based on the ID3 tags contained within them. If no ID3 tags are found the filename will be left unaltered.
+
 
+
== NetSpeedometer ==
+
 
+
[http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=56 NetSpeedometer] allows you to graphically monitor the speed of your internet connection. NetSpeedometer shows a graphic of your traffic speeds on your Apple Macintosh screen to help you keep track of data as it goes in and out of your machine. Free to download and distribute.
+
 
+
== Macnifier ==
+
 
+
[http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=56 NetSpeedometer] is Mac OS X software to expand part of your view for a closer look. [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=56 NetSpeedometer] shows a magnified section of your Apple Macintosh screen to help viewing up close. Free to download and distribute.
+
 
+
SubRosaSoft's [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=56 NetSpeedometer] displays a magnified portion of your screen in a separate window. Originally designed as a helper application to assist the visually impaired - it has become an ideal tool for Mac graphic design professionals who need pixel perfect placement and control.
+
 
+
It allows variable zooming, and variable speed refresh. This ability is helpful for the visually impaired and is almost essential for precision work in graphics design programs.
+
 
+
== ScreenBoard ==
+
 
+
[http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=11 Screenboard] allows the user to share their view with other users over the internet using [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=11 Screenboard] and the “Web Sharing” capability built into your Apple Macintosh Computer.
+
 
+
SubRosaSoft's [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=11 Screenboard] lets others on your network watch your screen in a web browser. Ideal for labs, demonstrations, conferences, presentations, and any time you want to show others what you are doing.
+
 
+
You can select how often you want it and Screenboard will save a screenshot (in jpeg format) and a web page (in html format) to the folder of your choice. If you select to save the files into your built in personal web server folder - users on your network (or internet) can view your screen in their web browser.
+
 
+
 
+
= External Links =
+
 
+
* [http://www.SubRosaSoft.com/ SubRosaSoft.com Inc. Website]
+
* [http://www.MacForensicsLab.com MacForensicsLab Website] - Digital forensics and eDiscovery software for law enforcement professionals.
+
* [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=1 FileSalvage] - Undelete your files and recover lost data.
+
* [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=7 CopyCatX] - Duplicate hard drives quickly, even disks with bad blocks.
+
* [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=6 VolumeWorks] - Repartition your hard drive without erasing it
+
* [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=2 PodSalvage] - Rescue lost music from your iPod or storage media.
+
* [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=3 CameraSalvage] - Get back lost pictures and photos from your digital camera.
+
* [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=5 OfficeSalvage] - Recover lost or deleted office files.
+
* [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=193 DasBoot] - Create bootable utility drives.
+
* [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=15 Macnifier] - Software for the visually impaired.
+
* [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=186 MusicRenamer] - Auto file renaming for your music files.
+
* [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=56 NetSpeedometer] - How fast is your connection.
+
* [http://www.subrosasoft.com/OSXSoftware/index.php?main_page=product_info&cPath=200&products_id=11 Screenboard] - Share your screen with other network users.
+
 
+
[[Category:Vendor]]
+

Revision as of 00:28, 15 April 2014

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Contents

MEMO file

Some of the Ag*.db files are MEMO files.

The MEMO file consists of:

  • file header
  • compressed blocks

File header

The file header is 84 bytes of size and consists of:

Offset Size Value Description
0 4 0x304D454D ("MEM0") or 0x4F4D454D ("MEMO") Signature
4 4 Uncompressed (total) data size

Compressed blocks

The file header is followed by compressed blocks:

Offset Size Value Description
0 4 Compressed data size
4 ... Compressed data

Uncompressed data

TODO

TRX file

The Ag*.db.trx files are TRX files.

Note that the following format specification is incomplete.

File header

The file header is 84 bytes of size and consists of:

Offset Size Value Description
0 4 1 Unknown (Version?)
4 4 Unknown
8 4 File size
12 4 Unknown (Record count?)
16 4 Unknown (Record count?)
20 4 Unknown (Records offset or file header size)

See Also

External Links