I am looking for a tool that can be used against the output directory of carving tools like scalpel.
The tool should make use of the fact that several filetypes store useful information such as "creator" , "creationdate" or "title" in plaintext inside the file.
The tool should use a library which lists how to extract such information from a certain filetype.
Lets say we have a pdf-file…
then the library would keep instructions like
- extract the first x bytes from the file
- grep the extract for a string "creator"
- clean up the resulting string so that it can be used as a filename
- rename the original file
For other filetypes it would use different renaming instructions …
If the tool gets a file with a filetype for which no instructions exist in the library it should be skipped.
Does anybody know of a tool for such a purpose ?
In short I am looking for a batch renamer that extracts the new filename from the file itself
Sanbarrow - this is a biased reply but my
The file name always started with a unique recoverxxxx string, followed by file specific info
It is not possible for the user to change this, but I am happy to listen to requests of what could be added.
These features are part of the free demo
Interesting - I would not mind to pay for something useful though I would prefer something that can be used from a Linux liveCD.
Can I find a list of filetypes your tool can rename ?
A summary of files processed, and ones that create file names
http//
The processing often includes validating the length, and also extracting files from compresed NTFS disks. By vaildating the length, the Hash value will be significant.