| Computer Forensics and Data Analysis |
Software Services |
|
|
||||
|
Software |
Services |
||||
Home
|
As of January 2010 Mares and Company will no longer be selling the Maresware software.
There will be minimal availability. If you find program(s) that you would like, please
contact us for instructions on obtaining them.
The software is supplied AS IS with no warranty of usability, reliability or correctness. It will be the users resonsibility to determine if the software meets their needs. BTW: All the software is command line. That whenever any form of government becomes destructive to these ends, it is the right of the people to alter or to abolish it, and to institute new government, laying its foundation on such principles and organizing its powers in such form, as to them shall seem most likely to effect their safety and happiness. (Declaration of Independence, 1776 ) EMAIL Users take notice: Because of spam, Any mail with .info anywhere in the header is automatically blacklisted. If you have a domain of .info and which to be whitelisted call me personally. I hope you understand. see a post about command line tools: and upcopy. Diskcat, upcopy and a few others are now available as 64 bit software. They will be found with the 32 bit versions. Direct links to software and help pagesFiles A-C | Files D-F | Files G-K Files L-O | Files P-S | Files T-Z
As of July 2005, Dan Mares has joined the forensic team at
The NorcrossGroup.com as the
Program Director of Forensics Development. Therefore all requests for
forensic services should be directed to the
Norcross Group. 
For security purposes, the Maresware suite of software is only available to selected
individuals. Some of the software is available at the ftp site. But may be limited in use. The user of any of the software assumes all liability and responsibility for its use. The software is supplied AS IS with no warranty of usability, reliability or correctness. It will be the users resonsibility to determine if the software meets their needs.
|
As of January 2010 Mares and Company will no longer be selling the Maresware software. Craig Ball is one of the most knowledgeable and experienced trial attorneys in the field of electronic/digital evidence and e-discovery. Check out his articles on this page. Craig Ball articles NSRL RDS Files The NSRL v.231 hash set comprises of about 62 Million individual hashes. I have taken these and created a unique.md5 hash set which contains approximately 19.0 million unique hash values, and 21 million unique filenames. The file which contains ONLY the md5 values is called UNIQUE.zip and can be downloaded here. There is also a file containing the filename and hash of that file. Which can be downloaded here MD5 and SHA vectors I have taken the NIST MD5 vectors, and standard SHA1, SHA2(256,384,512) vectors and made the appropriate files for you to test your programs with. The zip file containing all the originals, instructions and the appropriate input files can be found here. Unzip them retaining appropriate directories. There is also a crude ASCII2HEX program for converting the vectors (inputs) to their proper hex form. If you find errors in the files please advise.
Voting
(09/2011) HASH. An upgrade to hash which can add an alternat data stream to a file. This ADS, can be used as a validation tag. Check out the --ADS option. (9/2009) RECYCLED_I. A program to take the $I files from the VISTA $RECYCLED bin, and produce a delimeted output of the metadata of the deleted files. (4/2009) (ACCESS.exe) A simple program describing where to find the last access date update key, and it also shows if the computer you run it on has that key set or not. Download: ACCESS.exe (4/2009) (VSS.exe) A simple program to mount an XP, VISTA, SERVER, Volume Shadow Copy as a logical drive letter. This allows the examiner to see a drive as it was then, not as it is now. Download: VSS.exe (2010) (URL_SRCH) is a program which finds files that contain IP addresses, e-mail addresses, and URL formats. It then provides a list of those files for the user to act upon.
|