This will provide you with the different options and parameters used in Bulk Extractor.
1) Provide a screenshot and whether or not this was helpful to you.
Next you will extract an image from https://downloads.digitalcorpora.org/corpora/scenarios/2009-m57-patents/drives-redacted/
You need the one titled: terry-work-usb-2009-12-11.E01
2) You are tasked with extracting this data and then sending it to an output folder (-o). I recommend titling your output folder something like bulk_output.
Remember to start your command with
# bulk_extractor (and then type the remainder of the argument)
Provide a screenshot of what you came up with…it should have quite a bit of metadata. You will know you are on the right track if you get this message at the top of your terminal box:
“All Threads Finished!”
Provide 1-2 paragraphs of the importance (to a digital forensics investigator) of the metadata provided to you
3) Next you will need to view the output of the findings from bulk_extractor. This is a simple command to list what is in the folder. Remember this will be a 2-step command (you need to look at the main directory and then drill down to the folder you created with the extracted data. Provide a screenshot.
4) Finally, provide any information you can after reviewing the contents of the .EO1 image (see anything that is sticking out? Credit Card numbers, Telephone numbers?) This should be in paragraph form – between 2-3 paragraphs.
The post Bulk_Extractor for Data Extraction first appeared on COMPLIANT PAPERS.