Computer Forensics and Data Analysis
Software Training Services  
      Search:

Maresware Programs A through C

Includes: Add_recl / Bates_no / Boot.com / Brandit / Bsearch / Catalog / Ch / Chek_env / Chs_conv / Chsize / Collate / Compare / Copy_ads / Crckit / Crc_test

Add_recl
Adds a 4 byte record length to each record in a file

The Add_recl program is designed to help reformat (variable length) carriage return delimited records.

Occasionally databases contain records whose individual layout or format can be identified by a value located in a specific field of the record. Different record types (formats) within the file will be identified by a unique value associated with that particular record format. These record formats represent records of varying sizes. But within each record type (format), the length of that record is usually consistent.

Databases write these records to carriage return delimited files. Add_recl will read each record and add, or prepend, to each record the 4 byte value equal to the length of that particular record. This 4 byte record length now makes the record compatible with the Maresware Search.exe program and allows the user to search these records for specific record types as identified.

This is a free program provided without any warranties or claims of use.

 |  Get the free add_recl.exe  | 

Top

Bates_no
Renumbers and/or copies files while renaming them to include a Bates number (also available for Linux)

Be sure to check the help file for additional information about this program.

Or download and review this PDF file for more information

Bates_no is a program which helps attorneys(or anyone using the Bates numbering system) to identify e-documents. While many programs can be used for Bates stamping individual pages in e-documents, few will assign Bates numbers to the filenames. Bates_no will. This feature is useful in identifying files for discovery and evidentiary purposes as well as for records management. The program was developed at the request of an attorney specializing in forensic processing of computer data and designed with his assistance.

Bates_no can renumber files in place (the files should have already been copied to a work location). Or it can copy files and renumber as it copies to a single destination directory.

The Bates numbers can be placed either before the filename or before the filename extension. Bates_no does not number the individual pages of your documents.

Bates_no can create a secondary output file in HTML format. (2/2004) Many users create .pdf or .htm files for discovery purposes, then use Bates_no to rename all the files with the bates number. This secondary file contains a link to all the files that have been renamed with a bates number. This allows direct links to the files using a browser.

There is also an Undo feature to remove the numbers you've assigned.

Bates_no is also available for Linux in the suite Maresware: Linux Computer Forensics.

 |  Get bates_no.exe  |  Get the .hlp file  |  Get the .pdf file  |  Get the Zip file.  | 
 |  View the html help file.  | 

Top

Boot.com

Reboot the Computer

Be sure to check the help file for additional information about this program.

This program is a small 5 byte com file that will reboot the system.
It is used when running batch files that may need to have an unattended reboot of the system.
The boot.com program will do a cold boot on most systems. However, on some 486's it appears to do a warm boot. This program only runs as a DOS program.

 |  Get boot.com  |  Get the .hlp file  |  Get the .pdf file  |  Get the .zip file  | 
 |  View the html help file.  | 

Top

Brandit
Brand hard disk drives

Be sure to check the help file for additional information about this program.

Brandit is designed to allow administrative officials the capability of putting "ownership" information on hard disk drives.

This information will generally contain ownership and assignment information. When a branded computer is stolen and later recovered by police, they can run their reader copy(downloadable for free at this website) and identify its owner. It does not require any external monitoring station.

Brandit is also used for inventory and assignment control purposes within corporations and organizations.

Read more about Brandit.

 |  Get the "reader" program  | 
 |  Get the .hlp file  |  Get the .pdf file  |  Get the Zip file  | 
 |  View the html help file.  | 

Top

Bsearch
Search sorted file for keys

Be sure to check the help file for additional information about this program.

Using a very fast, binary search algorithm the Bsearch program allows you to search a file(s) for occurrences of specific keys.

The program allows you to search a fixed length record file on a sorted field for the occurrence of specified search keys. Because of the algorithm used, the search is almost instantaneous. Consider the bsearch algorithm similar to searching an indexed data base for a key in one of the indexed fields. The response time is negligible.

For searching files that are not sorted, check out the Search program.

Because of the way Bsearch operates, it is not possible to offer a sample program. The version that is downloaded is not operational until fully registered by a licensed Maresware user.

 |  GET the 32 bit version  | 
 |  Get the .hlp file  |  Get the .pdf file  |  Get the .zip file  | 
 |  View the html help file.  | 

Top

Catalog
A file cataloging utility for Linux

This program is designed to provide a list or catalog of all the files under a Linux operating system. It also displays file permissions and owner ID.

Its operation can be modified by command line options. It is similar to the DOS Diskcat program, but with different output format. A version of this program also exists for some Sun workstations.

Top

Ch
An intelligent Change Directory command

Be sure to check the help file for additional information about this program.

This is a 16 bit program to be used instead of the DOS cd (change directory) command. It is more intelligent and will increase the user's efficiency when using the change directory command.

Ch is modeled after the UNIX chpath environment variable setting which allows users an easy way to change directories.

 |  Get ch.exe  |  Get the .hlp file  |  Get the .pdf file  |  Get the Zip file.  | 
 |  View the html help file.  | 

Top

Chek_env
A program to check environment variables

Be sure to check the help file for additional information about this program.

This is a 16 bit program which can be used to check if an environment variable has been set. If the variable is set, the program can check the value of the variable and report an error level based on the results of the check.

If used in a batch file, this program can be used to switch between different paths of execution.

 |  Get chek_env.exe  |  Get the .hlp file  |  Get the .pdf file  |  Get the Zip file.  | 
 |  View the html help file.  | 

Top

Chs_conv

A 32 bit program, Chs_conv will take a cylinder head sector (CHS, 200/20/15) and convert it into a linear sector number and vice versa. It can be be helpful in converting CHS to LBA values when the program you are using only supplies one value.

Even though with advent of LBA and linear sector addressing, the formula and calculation for linear to CHS still exists. This program will perform that calculation.

 |  Get chs_conv.exe  | 

Top

Chsize
Change a file's size

Be sure to check the help file for additional information about this program.

Chsize will alter/change the size of a file on the disk.

It can either expand (add to) the size of the file, or truncate (decrease) the size of the file. If the file is truncated, truncated data is lost.

This program can be used to develop test files of specific sizes.

 |  Get ch.exe  |  Get the .hlp file  |  Get the .pdf file  |  Get the Zip file.  | 
 |  View the html help file.  | 

Top

Collate
Collate 2 files together

Be sure to check the help file for additional information about this program.

This program will take two identically formatted files that are sorted and collate them together into one output file.

The files can be sorted in either ascending or descending order.

The files must be of a fixed record length, but do not need to have carriage returns as a record terminator.

 |  Get collate.exe  |  GET the 32 bit .exe  | 
 |  Get the .hlp file  |  Get the .pdf file  |  Get the Zip file.  | 
 |  View the html help file.  | 

Top

Compare
Compare 2 sorted files on a sorted field

Be sure to check the help file for additional information about this program.

Compare will compare two files that are sorted on the same sort field.

The records can be of a different structure, but the sorted or compare field must be the same. It will compare the records in a file designated as the 'A' file with records in a file designated as the 'B' file.

The user can select which fields from either file should produce the output record

 |  Get ch.exe  |  GET the 32 bit version  | 
 |  Get the .hlp file  |  Get the .pdf file  |  Get the Zip file.  | 
 |  View the html help file.  | 

Top

Copy_ads
Identify and Copy NTFS Alternate Data Streams

Be sure to check the help file for additional information about this program.

Once NTFS Alternate Data Stremas are identified, there is little most software will do to process the files. The Copy_ads program will identify Alternate Data Stream files located on an NTFS partition.

Copy_ads will also, if requested, extract the Alternate Data Stream and copy it to a destination of your choosing while placing the file in a "normal" file which can then be manipulated with traditional software.

This program has been added to the packages Maresware: Computer Forensics and Maresware: The Suite. It is also available for purchase as an individual program, and with the option of volume discounts and site licensing.

 |  GET Copy_Ads  | 
 |  Get the .hlp file  |  Get the .pdf file  |  Get the Zip file.  | 
 |  View the html help file.  | 

Top

Crckit
Calculate 16 or 32 bit CRC of a file(s)

Be sure to check the help file for additional information about this program.

Crckit may be used for a number of different purposes:

It provides a 32 bit CRC and a 16 bit checksum of a file or files. The 32 bit value is identical to one created by the PKZIP program for its internal file integrity checks. This allows for a cross verification of any value that Crckit produces.

The output produced by Crckit is a fixed length record capable of being imported into a data base for additional analysis. It can be used to verify that a file has not been changed since a reference CRC was created.

It can also be used in a batch file to check the integrity of a program before execution.

For a test suite of programs to evaluate the usefulness and accuracy of your CRC and hashing programs, we have compiled a zip file that contains standard files used to verify program output. The description of the files is found in this file and the files themselves along with a batch file driver program are found here in this zip file.

The 16 bit version of Crckit has been modified to not alter last access date when run under DOS boot.

 |  Get the 16 bit exe  |  GET the 32 bit exe  | 
 |  Get the .hlp file  |  Get the .pdf file  |  Get the entire Zip file  | 
 |  View the html help file.  | 

Top

Crc test
Suite of files and batch files to verify program execution

Use the known content supplied in our Crc_test to validate the output of programs you use to calculate CRC, MD5, or SHA1 values.

This zipped file contains batch files, test files and information about appropriate software programs for calculating CRC, MD5 and SHA1 values. (These suggested programs are not included in the zip file. You should obtain them directly from their authors--most are free.) Also contains sources for some CRC algorithms. This suite of files, programs, and batch files was intended to serve as the basis for developing your own routine for validating software programs.

The test files are of known content which is obtained primarily from NIST and other sources that verify and implement testing procedures. Includes a document containing the correct CRC, MD5 and SHA1 of the files in the zipped file. You can compare these against the values obtained from the program you are using to perform calculations on the test files.

The batch files automate some of the validation process if you are using Maresware:The Suite. You can also substitute your own choice of programs in the batch files.

 |  Get the zip  | 

Top

Home  |  Whats New  |  How to Order  |  Training  |  Services  |
About Us  |  FAQs  |  Articles  |  Resources  |  Legal Notices  |  Contact Us  |
Files A-C  |  Files D-F  |  Files G-K  |  Files L-O  |  Files P-S  |  Files T-Z  |
 |  SoftwareData Analysis Software  |  Forensic Processing Software  |  Linux Processing Software  |
Complete helpfile.zip  | Complete pdf_s.zip  | Complete 16 bit software.zip  | Complete 32 bit software.zip  |
 
copyright © 1998-2008 by Mares and Company, LLC