summaryrefslogtreecommitdiff
path: root/system/bulk_extractor/README
diff options
context:
space:
mode:
authorBarry J. Grundy <bgrundyatlinuxleo.com>2012-08-11 14:20:42 -0400
committerRobby Workman <rworkman@slackbuilds.org>2012-08-14 22:30:50 -0500
commit101fb426987bb95a041af9b6f847baf31e5ccb1a (patch)
tree915204151d02b977d48557dec8953fc8fc71671e /system/bulk_extractor/README
parent7c4462dd7684741dc54da555e82cde7939a417aa (diff)
downloadslackbuilds-101fb426987bb95a041af9b6f847baf31e5ccb1a.tar.gz
system/bulk_extractor: Added (forensic tool)
Signed-off-by: dsomero <xgizzmo@slackbuilds.org>
Diffstat (limited to 'system/bulk_extractor/README')
-rw-r--r--system/bulk_extractor/README10
1 files changed, 10 insertions, 0 deletions
diff --git a/system/bulk_extractor/README b/system/bulk_extractor/README
new file mode 100644
index 0000000000..76ec8a701f
--- /dev/null
+++ b/system/bulk_extractor/README
@@ -0,0 +1,10 @@
+bulk_extractor is a C++ program that scans a disk image, a file, or a directory
+of files and extracts useful information without parsing the file system or
+file system structures. The results are stored in feature files that can be
+easily inspected, parsed, or processed with automated tools. bulk_extractor
+also creates histograms of features that it finds, as features that are more
+common tend to be more important.
+
+bulk_extractor is distinguished from other forensic tools by its speed and
+thoroughness.
+