Having this site hosted on wordpress.com has some limitations that I need to overcome if I’m going to be doing this more regularly. So, all of this content has been moved over to the new and much improved taksati.org. Update your whatevers as appropriate. http://www.taksati.org/ P.S. Yes, this totally counts as today’s post. AdvertisementsRead more "Moving"
I was asked not too long ago about how to extract metadata from inside a file. Easy, I said. I then proceeded to walk through how to use EnCase’s View File Structure feature to see inside certain file types. Too much work, he said. Can you script that so I can do that to several […]Read more "Bulk Extract EXIF"
Plist files are found sprinkled throughout OS X and iOS and contain the various configuration settings and other information of use to the OS and applications.Read more "Plists"
welcome back! A lot of changes are afoot for 2015. I am in a position where I’ve decided I need my public persona to be a little more public. So, I’m stealing a move from David Cowen’s playbook and will be doing a blog post a day for the next year. The goal being to […]Read more "Blog a day"
I got an interesting email today. The headers: Received: from mail-qa0-f47.google.com (184.108.40.206) by my.exchange.server (192.168.1.1) with Microsoft SMTP Server id 14.2.347.0; Wed, 22 Oct 2014 09:02:52 -0400 Received: by mail-qa0-f47.google.com with SMTP id cm18so2352642qab.6 for <firstname.lastname@example.org>; Wed, 22 Oct 2014 06:02:51 -0700 (PDT) X-Gm-Message-State: ALoCoQmf9GbcGqvsr0EmNIh1kGul9vAE9+L+H3zfk+CntPSkas8OLcrLeM9ISXmYIS16W57cL4L/f3pUKDnO10Mmi5n9T9cnDERwdGJaTC2EeaIDxh6tMsRjT3Dn47O9O/05tSlXz5UayMWhvD9Scvhx7fCjrrFSy0WYOv7nsHpSYcCzPY/mADE= X-Received: by 10.140.30.53 with SMTP id c50mr52767444qgc.77.1413982971840; Wed, […]Read more "People still use Word macros!?!"
I’m not sure how I missed it when it came out in 2009, but Peter Norris has put together an absolutely fantastic write up on the internal structures of the Registry. Deep internal knowledge like this is vital when you are finding parts of old registry files in unallocated space, the page file, or memory. […]Read more "Registry"
Many digital cameras will compress their images into JPEG files, making them much easier to deal with for the average consumer. But, occasionally, you run across those that take their image capturing seriously who will set their cameras to save the files in “RAW Mode”. What that means depends on the model of camera. IrfanView […]Read more "RAW Images"