Please enable JavaScript.

Coggle requires JavaScript to display documents.

(P2P) - Coggle Diagram

- - - - it is a text editor
    - - fully parses the MFT file from an NTFS filesystem and present the results as accurately as possible
    - - handle everything from small to very large projects with speed and efficiency.
    - - collection of UNIX-based command line file and volume system forensic analysis tools
    - - evaluate queries interactively and display the results in multiple formats
    - - program for recursively computing hashes with multiple algorithms simultaneously
    - - Cross-platform application intended to create and edit .torrent and uTorrent .dat files
    - - Python script to parse the NTFS USN Journal
    - - carve NTFS USN journal records from arbitrary binary data, and output to a file in binary format.
    - - used to analyze crash dumps, raw dumps, VMware & VirtualBox dumps
    - - allows you to run Windows applications on Unix
    - - tool to send and read mails from command line in Unix based systems
    - - uses plugins to extract information out of the registry files
      - rip.pl
    - - library to access the Windows Shortcut File (LNK) format
    - - programming language
    - - to extract metadata of a file
    - - to search for a string of characters in a specified file
    - - lists directories and files in the specified path
    - - to replace long commands, improving efficiency and avoiding potential spelling errors.
    - - to recursively list or display the content of a directory in a tree-like format
  - - - to mount a disk image
    - - modifies the file permissions
    - - used to copy files or group of files or directory
    - - Extract the data units of a file
    - - initial files
  - - - open and save documents in many other formats, including those used by several versions of Microsoft Office
    - - displays the i-node information for a particular file
    - - to detect anomalous behavior and reconstruct events
  - - - to print the content of a file onto the standard output stream
    - - web browser
  - - - computes, and prints or verifies, MD5 128-bit checksums contained in a specified FILE
  - - - to run large numbers of files through any of several different cryptographic digests
    - - can view and edit binary files by presenting data in hexadecimal and ASCII formats
  - - - to display a line of text/string on standard output or a file
    - - for selecting a specific column of a file
    - - to return the string characters into files
  - - - use to display a partition table
    - - file system information of a partition
    - - Can show unallocated sectors so it can be used to search for hidden data
  - - - used to move files and directories from one location to another