file sleuth
File Lister 1.0
File Lister is developed to be an easy to use utility which helps with listing files. more>>
File Lister 1.0 is developed to be an easy to use utility which helps with listing files. It has options for excluding and matching files not found in Sherlock or other search applications. File Lister could be used as a search utility, though it's main purpose is to return and save a list of files. Lists can be saved as text or html files.
Saved text file lists can be re-opened by File Lister. Saving as html is best for printing or web implementation. The html generator uses style-sheets, which make page loading faster for large lists. If the list is saved as html you have the option to link each file name to it's path on your system.
This makes all of the listed files accessible from a single page (good for an mp3 list or documents; note that long file names are not supported in IE). Other html options include: table border, cellspacing, cellpadding, html title, font, text size, text color, link color, active link color, visited link color and hover link color.
File Sorter 1.7
Renames files sequentially, using any file extension. more>>
File Wrench 1.1
File Wrench provides access in Os X to the file attributes and much more that were easily accessible from resedit in classic more>> <<less
The Sleuth Kit 3.0.1
Free and open source command-line file and volume system forensic analysis tools more>> Free and open source command-line file and volume system forensic analysis tools
The Sleuth Kit (previously known as TASK) is a collection of UNIX-based command line file and volume system forensic analysis tools.
The file system tools allow you to examine file systems of a suspect computer in a non-intrusive fashion. Because the tools do not rely on the operating system to process the file systems, deleted and hidden content is shown.
The volume system (media management) tools allow you to examine the layout of disks and other media. The Sleuth Kit supports DOS partitions, BSD partitions (disk labels), Mac partitions, Sun slices (Volume Table of Contents), and GPT disks.
With these tools, you can identify where partitions are located and extract them so that they can be analyzed with file system analysis tools.
When performing a complete analysis of a system, we all know that command line tools can become tedious. The Autopsy Forensic Browser is a graphical interface to the tools in The Sleuth Kit, which allows you to more easily conduct an investigation.
Autopsy provides case management, image integrity, keyword searching, and other automated operations.
The tools run on Mac OS X, FreeBSD, OpenBSD, Linux, and Solaris and can analyze FAT, NTFS, UFS, EXT2FS, and EXT3FS.
NOTE: The Sleuth Kit is released under the Common Public and IBM Public Licenses.
Main features:
- Analyzes raw (i.e. dd), Expert Witness (i.e. EnCase) and AFF file system and disk images. (Sleuth Kit Informer #11)
- Supports the NTFS, FAT, UFS 1, UFS 2, EXT2FS, EXT3FS, and ISO 9660 file systems (even when the host operating system does not or has a different endian ordering).
- Tools can be run on a live UNIX system during Incident Response. These tools will show files that have been "hidden" by rootkits and will not modify the A-Time of files that are viewed. (Sleuth Kit Informer #13)
- List allocated and deleted ASCII and Unicode file names. (Sleuth Kit Informer #14 (FAT Recovery), #16 (NTFS Orphan Files))
- Display the details and contents of all NTFS attributes (including all Alternate Data Streams).
- Display file system and meta-data structure details.
- Create time lines of file activity, which can be imported into a spread sheet to create graphs and reports. (Sleuth Kit Informer #5)
- Lookup file hashes in a hash database, such as the NIST NSRL, Hash Keeper, and custom databases that have been created with the md5sum tool. (Sleuth Kit Informer #6, Sleuth Kit Informer #7)
- Organize files based on their type (for example all executables, jpegs, and documents are separated). Pages of thumbnails can be made of graphic images for quick analysis. (Sleuth Kit Informer #3, #4, #5)
Enhancements
- Bug Fix: Fixed crashing bug in ifind on FAT file system. Bug: 2265927
- Bug Fix: Fixed crashing bug in istat on ExtX $OrphanFiles dir. Bug: 2266104
- Update: Updated fls man page.
- Update: Removed TODO file and using tracker for bugs and feature requests.
- Bug Fix: Fixed incorrectly setting block status in file_walk for compressed files (Bug: 2475246)
- Bug Fix: removed fs_info field from FS_META because it was not being set and should have been removed in 3.0. Reported by Rob Joyce and Judson Powers.
- Bug Fix: orphan files and NTFS files found via parent directory have an unknown file name type (instead of being equal to meta type). (Bug: 2389901). Reported by Barry Grundy.
- Bug Fix: Fixed ISO9660 bug where large directory contents were not displayed. (Bug: 2503552). Reported by Tom Black.
- Bug Fix: Fixed bug 2534449 where extra NTFS files were shown if the MFT address was changed to 0 because fs_dir_add was checking the address and name. Reported by Andy Bontoft.
- Update: Fixed fix for bug 2534449. The fix is in ifind instead of fs_dir_add().
- Update: Added RPM spec file from Morgan Weetmam.
File Watcher 1.1
File Watcher 1.1 is yet another lightweight graphical Java based file watcher similar in functionality to tail more>>
Enhancements: Jan 11 2008
- Memory overflow upon opening large files fixed
- Added user preference persistence
File Kill 1.0
File Kill - GUI to rm -rf to delete files or folders more>>
Completly freeware for personal use.
File Mover 1.4
File Mover is released to enable you to drop any number of files or folders onto it, select where you want them to go, and off they go! more>>
File Mover 1.4 is released to enable you to drop any number of files or folders onto it, select where you want them to go, and off they go!
Simply place this Droplet anywhere you need it! You'll have to set up the prefs first, it'll ask you to do this the first time you use it.
Requirements: Mac OS X 10.3.6
File Mover - takes a selected file(s) or folder(s) and shuttles it off to your Documents folder ... "Documents" folder, automatically replacing existing files. Open it up in Automator to tweakFile Stripper Utilities 1.0
File Stripper Utilities - Strip DATA fork, RSRC fork or RSRC names from files more>>
Completly freeware for non-commercial use.
Hotline File Search 1.0
Hotline File Search is an impressive utility which uses tracker-tracker to search for files. more>>
Hotline File Search 1.0 is an impressive utility which uses tracker-tracker to search for files. It has all of the options that tracker-tracker.com uses to search for files.
Requirements: Mac OS X
File Mutation 1.1.3
File Mutation - Fast conversion of many image file formats more>>
File Mutation can read "Convert From" These File Formats: PICT, BMP, GIF, JPEG, JPEG2, SGI, TGA, PDF, PNG, TIFF, TEXT, QuickTime Image, MacPaint, Photoshop, PSD.
File Mutation can write to "Convert To" PICT, PSD, BMP, JPEG, PNG, TIFF.
Enhancements:
- Updates to Universal Binaries,
- Added New graphical support interface; with built in feedback and improved bug reporting.
File Reader 1.0
File Reader is an all-in-one and very useful utility which allows users to view the contents of any file in a bytewise manner using a simple GUI interface. more>> File Reader 1.0 is an all-in-one and very useful utility which allows users to view the contents of any file in a bytewise manner using a simple GUI interface. Functions include byte view changes to different primitive datatypes, endianess changes, and file content exports to new files.<<less
File Type 1.0.1
Change file type creator. more>>
File Message 1.0
File Message - File name management more>>
This provides an animated method of information presentation using nothing more than the Finder.
Completly freeware.
File Adopter 1.0
File Adopter is a smart program which utilizes your Internet Config preferences to help you insert type and creator codes to files that lack them. more>>
File Adopter 1.0 is a smart program which utilizes your Internet Config preferences to help you insert type and creator codes to files that lack them. Typeless files are common on Mac OS X, and are a source of numerous frustrations. File Adopter works with simple drag and drop. It can replace existing type and creator codes if they disagree with Internet Config, or only add codes when they are absent.
After adopting a file, it shows you the changes it has made. You can also hold down Shift to orphan a file, instead of adopting it. This is useful if you know that the file has incorrect codes but that the correct ones aren't in Internet Config.
