extractdocs


This script is for forensic purpose.

I haven't found a utility to simply search keywords even in binary files of common office formats. Extractdocs matches the content of a "keys" file with pdf,xls,doc,xlsx,docx format files contained in a forensic dd image, splitted or not.

Arguments:

none

Prerequisite: packages ts (moreutils),catdoc,docx2txt,pdfgrep,xlsx2csv,gdmap,photorec,fdupes



Usage:


extractdocs.sh is interactive. It asks for Case name, path, device name, image format, image path, name of image, and other params during analysis.


Download