iFilter integration and checksum search
Posted: Mon Apr 05, 2021 9:07 am
VoidTools - Everything appears to be a sensible tool to consider for cyberforensics.
The only downside is the lack of content search, to this end i seek how to extend the functionality using iFilters.
Essentially the search functionality of everything will show up the kind of files we need to identify based on the filetype and/or extension or checksum value (md5/sha1/sha256) Only in a second step where files are already filtered searching contents makes sense.
To this end i hope to better understand how to enable ifilter for voidtools so i can search contents for selected files, this can be slower.
I hope to hear from you.
Thank you,
JL
The only downside is the lack of content search, to this end i seek how to extend the functionality using iFilters.
Essentially the search functionality of everything will show up the kind of files we need to identify based on the filetype and/or extension or checksum value (md5/sha1/sha256) Only in a second step where files are already filtered searching contents makes sense.
To this end i hope to better understand how to enable ifilter for voidtools so i can search contents for selected files, this can be slower.
I hope to hear from you.
Thank you,
JL