-
Notifications
You must be signed in to change notification settings - Fork 192
BEViewer
Bulk Extractor Viewer (BEViewer) is a User Interface for browsing features that have been extracted via the bulk_extractor feature extraction tool. BEViewer supports browsing multiple images and bookmarking and exporting features. BEViewer also provides a User Interface for launching bulk_extractor scans.
-
Windows
- Download and install the be_installer .msi file from https://github.com/simsong/bulk_extractor/downloads.
- Run Bulk Extractor by selecting it in the Start menu.
-
Linux, Macintosh
- Download the BEViewer .jar file from https://github.com/simsong/bulk_extractor/downloads.
- Run the .jar file from the command line with more memory than Java provides by default by typing java -Xmx1g -jar BEViewer.jar from the command line.
The Copy button is failing to copy selected ranges to the System Clipboard in BEViewer V1.2.1-devel_003. This will be fixed in the next BEViewer update expected on May 25.
A new update of the Windows MSI installer is now available as be_installer_64-1.2.0b3.msi. This is a temporary update and will be replaced by be_installer_64-1.2.3.msi soon, but not before May 7. This update provides the following:
- It contains BEViewer V1.2.1-devel_003. Please see New Capability in V1.2.1-devel_003, below.
- It is not fully compatible with bulk_extractor 1.2.0 which is packaged with it. Please see Limitations in New Capability in V1.2.1-devel_003, below. Because the "Run bulk_extractor" portion of this V1.2.0b3 update is not fully compatible with bulk_extractor, you may choose to continue with the older .msi file. Otherwise, you may prefer this newer update.
- Feature formatters have readable output for most feature types.
- User Interface usability has been improved. Also, the ESC key now deselects selections.
- BEViewer now accepts command-line input parameters during invocation. In particular, input -r starts a bulk_extractor scan when BEViewer starts.
- Printing is now supported for Feature content.
- Unused libewfcs code is no longer packaged in the .msi file, most notably file libewfcstester.exe.
- Limitations: BEViewer's Run bulk_extractor UI is designed to run bulk_extractor V1.2.3, not bulk_extractor V1.2.0. Because of this, the Context Stoplist option does not work and new options (page size, block size, option name, max wait, processing range, offset, and erase) are not supported.
- Features have been corrected to no longer show escape codes.
- Feature formatters provide readable output for specific feature types: GPS, EXIF. To be done: IP, TCP, JSON.
- BEViewer is now compatible with bulk_extractor v1.2 and is expected to be forward-compatible with bulk_extractor v1.3.
- User Interface usability has been improved.
- Misc. capability has been added: the ability to scan from a Raw Device on Linux, the ability to print Feature content.
- Feature formatter outputs for some format types may be adjusted.
- The printing of Feature content may be adjusted.
- Developer: bdallen@nps.edu.
- Bulk Extractor Users Group: http://groups.google.com/group/bulk_extractor-users.
bulk_extractor and BEViewer are now hosted here on github at https://github.com/simsong/bulk_extractor/wiki. Their old home pages are being discontinued:
- The old home page for bulk_extractor at http://afflib.org/software/bulk_extractor is being discontinued.
- The old home page for BEViewerer at https://domex.nps.edu/deep/Bulk_Extractor.html is being discontinued.