Difference between pages "Bulk extractor" and
"File:5-ScrewRemoval.jpg"  From Forensics Wiki (Difference
between pages) Jump to: navigation, search m (Academic
Publications) Line 1: Line 1: == Overview ==
'''bulk_extractor''' is a computer forensics tool that scans a
disk image, a file, or a directory of files and extracts useful
information without parsing the file system or file system
structures. The results can be easily inspected, parsed, or
processed with automated tools. '''bulk_extractor''' also
created a histograms of features that it finds, as features that
are more common tend to be more important. The program can be
used for law enforcement, defense, intelligence, and cyber-
investigation applications. bulk_extractor is distinguished from
other forensic tools by its speed and thoroughness. Because it
ignores file system structure, bulk_extractor can process
different parts of the disk in parallel. In practice, the
program splits the disk up into 16MiByte pages and processes one
page on each availab