bulk_extractor
bulk_extractor copied to clipboard
simsong
This is the development tree. Production downloads are at:
Following this issue https://github.com/simsong/bulk_extractor/issues/89, hashdb 3.1.0 is apparently officially working. However, running configure disable building hashdb because the version is apparently not present in the library: ``` checking hashdb.hpp usability......
See: https://unix.stackexchange.com/questions/87745/what-does-lc-all-c-do
Hi, I defined my targets to be scanned as a number of symbolic links. Then I call bulk_extractor in recursive mode: `bulk_extractor -R my_targets/ -o my_output` But it seems, BE...
Docker has emerged as a popular technology in build processes. Building (and especially cross-compiling) bulk_extractor is somewhat complicated and the `CONFIGURE_FEDORA` shell script handles installation of many of the necessary...
Lightgrep has some limited support for lookaround assertions now, which would be very useful in almost all of the lightgrep-based scanners.
For reference: https://github.com/gperftools/gperftools Using autoconf, add an optional dependency on libprofile, which allows for profiling at runtime via environment variables. `pprof` may only work correctly on Linux, but it's a...
x86 has had the pshufb instruction since the introduction of SSE3 in 2004. This instruction and later, more powerful variants are able to shuffle a vector of bytes according to...
See: * https://stackoverflow.com/questions/48816848/what-is-the-efficient-standards-compliant-mechanism-for-processing-unicode-usin * https://en.cppreference.com/w/cpp/locale/codecvt_utf8 * https://codingtidbit.com/2020/02/09/c17-codecvt_utf8-is-deprecated/ * https://stackoverflow.com/questions/215963/how-do-you-properly-use-widechartomultibyte * https://stackoverflow.com/questions/23919515/how-to-convert-from-utf-16-to-utf-32-on-linux-with-std-library/65159352#65159352 * https://community.notepad-plus-plus.org/topic/15649/visualization-for-zero-width-characters * https://chromium.googlesource.com/chromium/src/base/+/e54b164faf7ec01ecbaa5d59b289f0a5aeb51a09/strings/escape.cc * http://gavinchou.github.io/experience/summary/unicode-summary/ * http://www.unicode.org/L2/L2002/02368-default-ignorable.pdf
Previously, I determined that writing to SQLite3 was significantly faster than writing to feature files. Is it so much faster that we could just generate the feature files retroactively, from...
Either encoder_report or the bulk_extractor_reader should allow the setting of a maximum number of features per feature file to process to make it faster to debug.