JohnEbert's repositories
nsrl_carver
The "awk-centric" bash “data reduction” scripts "NSRL2MD5.bash, prodcodecarver.bash, and recordcarverx.bash" run in the order listed enable the ability to ask variable questions like ”Does the evidence image contain any files from John The Ripper, and also contain files from Python?” More info in the readme.pdf