9/7/2023 0 Comments Offline exif data viewer![]() ![]() It may also have issues with DRM protected files, but I haven't run into any yet.Īs mentioned above, VLC has issues with some of 's special formats, so I also include their player as a viewer. The only things I've found so far that it won't play are flash and some of the realmedia formats. ![]() There's no need to download any special codecs. I've found this open source multimedia player application to be one of the most reliable ways to play almost any audio/video content. I've found it typically used for youtube content. This application allows them to be played normally.įLV is a different flash video format. When examining downloaded multimedia web content, you often come across downloaded shockwave flash (.swf) movies. The 7zip archive browser, 7zFM, is a great way to deal with a large assortment of archive formats which may or may not be directly supported by your forensic tool of choice. NavRoad gets around that, and will usually format all of an html document's content for display. Often, html files recovered from a subject's browser cache won't display properly in a browser because of missing content that's expected to be downloaded directly. I have 6 different lines of this nature in my Encase configuration to deal with the various different registry file types supported by regripper. You can copy and paste items of note out of the buffer while it's open if desired. It's a command-line-only utility, but you can run it from within a GUI tool such as Encase by specifying CMD as the actual command, and then putting the meat into the options, such as "/c cd /d fullpathregripper&rip -r -f sam&pause" this will dump the text output into the buffer of the CMD shell (which will, of course need its default size expanded), then pause until the user hits the spacebar. I sometimes browse its output by eye when digging for things that are frustratingly nonspecific. It has many different plugins that handle extraction of different information, and I believe that Harlan updates it frequently. This tool, developed and maintained by Harlan Carvey, author of Windows Forensic Analysis, is a great all-purpose registry data extractor. The results from this are a list of applications and a few associated options for use in employing them as viewer plugins for your forensic tool of choice. I'd been doing a bit of work with EnCase to optimize my configuration and minimize the amount of work required to view various file types or extract specific data from them. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |