hbin
regf
http://www.taksati.org/regf/ one of these days, you’ll follow the new site and see content instead of a link…
Read more "regf"Registry Overview
http://www.taksati.org/registry-overview/ If you would follow taksati.org, I wouldn’t have to cross post like this. I’m speaking to you, @sansforensics.
Read more "Registry Overview"MRU
Most Recently Used blog post is here: http://www.taksati.org/mru/
Read more "MRU"Utilities by the Thousands
Last time I’m warning you. Blog moved. Stop following this! You can find the content for this post over here: http://www.taksati.org/utilities-by-the-thousands/ After this, this site will go stale and never get touched again. I’ll leave it here in case of natural disaster, but I’m otherwise never looking back.
Read more "Utilities by the Thousands"Command Line Happiness
No, really, the blog moved already. Go update your feeds. This post actually lives here – http://www.taksati.org/command-line-happiness/
Read more "Command Line Happiness"Moving
Having this site hosted on wordpress.com has some limitations that I need to overcome if I’m going to be doing this more regularly. So, all of this content has been moved over to the new and much improved taksati.org. Update your whatevers as appropriate. http://www.taksati.org/ P.S. Yes, this totally counts as today’s post.
Read more "Moving"Bulk Extract EXIF
I was asked not too long ago about how to extract metadata from inside a file. Easy, I said. I then proceeded to walk through how to use EnCase’s View File Structure feature to see inside certain file types. Too much work, he said. Can you script that so I can do that to several […]
Read more "Bulk Extract EXIF"Plists
Plist files are found sprinkled throughout OS X and iOS and contain the various configuration settings and other information of use to the OS and applications.
Read more "Plists"