±Forensic Focus Partners

±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 1
New Yesterday: 6
Overall: 27386
Visitors: 78

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

Introducing Simple File Parser v1.2.1

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

Introducing Simple File Parser v1.2.1

Post Posted: Fri Mar 30, 2012 12:54 pm

Hi All,

I'm currently writing a tool for the parsing of common Windows artefacts and I would like to share it with the forensic community. This tool is called the Simple File Parser (SFP) and it currently supports the parsing of link and prefetch files and allows the user to easily export the information to CSV format for a more detailed analysis.

To take a look at the program or to download it yourself, please visit the tool's blog page: simplefileparser.blogspot.co.uk/. You will need .NET 4 installed before running this program.

I will take on-board any comments, or if you find any bugs please let me know.

Chris.  

chrism
Senior Member
 
 
  

Re: Introducing Simple File Parser v1.2.1

Post Posted: Sun Apr 15, 2012 1:07 pm

Version 1.3 has been released and has initial support for Windows 7 jump-lists.  

chrism
Senior Member
 
 
  

Re: Introducing Simple File Parser v1.2.1

Post Posted: Mon Apr 16, 2012 3:39 pm

Thanks for this great tool.


Thierry  

tg92
Member
 
 
  

Re: Introducing Simple File Parser v1.2.1

Post Posted: Wed Apr 18, 2012 2:04 am

Thanks Thierry, I have plans to improve the jump-list support and to make it multi-threaded for performance (once I've worked out how to thread in C# that is!).  

chrism
Senior Member
 
 
  

Simple File Parser v1.4

Post Posted: Fri Jun 15, 2012 5:47 am

Version 1.4 has now been released with more robust support for jump-list artefacts, improved GUI and speed, multithreaded goodness and multiple time-zone support. Download at www.simplefileparser.blogspot.com.

As ever, please let me have your comments and suggestions for future releases.  

chrism
Senior Member
 
 
  

Re: Introducing Simple File Parser v1.5

Post Posted: Wed Nov 21, 2012 7:47 am

Version 1.5 now has support for the parsing of INDX Attributes ($I30 files).

Let me know if you have any issues.  

chrism
Senior Member
 
 
  

Re: Introducing Simple File Parser v1.2.1

Post Posted: Wed Nov 21, 2012 8:31 am

Does the LNK parser support parsing the shell item ID lists?  

keydet89
Senior Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 1 of 2
Go to page 1, 2  Next