Forensics and Reporting Guides


Guides for file format identification, location of deleted files and files fragments, cryptographic hashing, and reporting on potentially private and personally identifying information.


Analyzing a Disk Image with Brunnhilde



HFS Explorer

Bulk Extractor Viewer

Regular Expressions in Bulk Extractor

Understanding Bulk Extractor Scanners

Scanning Disk Images and Directories with Bulk Reviewer

Disk Image Reports

Annotated Features Report

Forensic Reports


Access and Export Files from Disk Images

Data Triage (Nautilus)

Create MD5 Sums (Nautilus)

Display a file in Hex editor (Nautilus)

Disk Image Metadata (Nautilus)

Extract Compressed Files (Nautilus)

Live Search for Files (Nautilus)

If you would like to provide feedback for this page, please follow this link to the BitCurator Wiki Google Form for the BitCurator All Step-by-Step Guides section.