Office document metadata for forensics: authors, last saved by, created, saved and printed times, edit time, counts, company and template, from 97-2003…
Application text logs for forensics: vsftpd, PostgreSQL, Debian popularity-contest, Snort and Suricata fast alerts, Google logging (glog), Santa, macOS…
Internet Explorer 4 to 9 cache and history files (index.dat) for forensics: cached URLs with their files and HTTP headers, visited pages, redirects, leaked…
Disk images for forensic intake: raw and split raw images, GPT and MBR partitions, NTFS (alternate data streams, compression), FAT and exFAT file listing with…
Pure-Rust, no_std, wasm32-ready Zstandard (RFC 8878) compressor and decompressor with dictionary support; interoperates with the reference C zstd in both…
CUPS print jobs for forensics: the IPP control files in the spool (/var/spool/cups, macOS and Linux): who printed what, from which application and host, to…
This crate is an Application Programming Interface to load and interpret grammars compiled in Portable Grammar Format (PGF). The PGF format is produced as a…