Support Forums

Is anyone out there using ProScripts?  Are you using the ProScripts that ship with ProDiscover, or modifying them, or writing your own?

I've written several ProScripts that I've posted here, as well as included on the DVD with my book.  I'm trying to get an idea of how many folks are using this powerful tool...and if not, why.  ;-)

---

Harlan Carvey, CISSP
Author of "Windows Forensic Analysis"
"Meddle not in the affairs of dragons...for you are crunchy, and good with ketchup..."

    Harlan,

I just started messing around will Prodiscover Basic and hadn't had the opportunity to try any of the Perl Scripts.  I am wounding if any of the scripts will perform carving operations?  I'm a bit lazy when it comes to salvaging, I'm used to going to tools in FTK and selecting the carving option.  By the way you blog's a big help and I enjoy reading it.  Thanks.

Compfor,

See Alex's post at http://toorcon.techpathways.com/cs/forums/thread/214.aspx There are specific data carving API's available in ProScript for data carving, but they are not available in ProDiscover Basic Edition. Only ProDiscover Forensics Edition or above.

 

---

Regards,
Christopher L. T. Brown, CISSP

I saw this post and said "WHAT?!? He wrote a book?!?", so, needless to say, I toured out to the store to pick it up. Good stuff in there!

You may recall, I write my own proscripts and combine them with pre-existing stuff etc. etc.. There's no end to the great things you can do with ProScript on machines. It really takes forensics capabilities to a whole new level, and god do I love Perl, so it's a great combination.