digital-forensics-labs/digital-forensics-lab
1
0
Fork 0
mirror of https://github.com/frankwxu/digital-forensics-lab.git synced 2026-02-20 13:40:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

imporve LogFile

Browse Source
This commit is contained in:
Frank Xu
2021-11-29 22:11:08 -05:00
parent 22a84ce770
commit 5e00a5549c
2 changed files with 40 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

40
Help/scripts/RegRipper30-apt-git-Install.sh Normal file
View File

@@ -0,0 +1,40 @@
#Installs Regripper 3.0 on Ubuntu and other Debian based systems that use the "APT" package manager
#Installs latest RegRipper3.0
#Installs win32-registry-perl
echo sudo is required
echo git is required
echo apt is required
which git || exit
which apt || exit
apt-get install -y libparse-win32registry-perl -y
# Downloads RegRipper3.0 and moves file into /usr/local/src/regripper and "chmods" files in regripper directory to allow execution
cd /usr/local/src/
sudo rm -r /usr/local/src/regripper/ 2>/dev/nul
sudo rm -r /usr/share/regripper/plugins 2>/dev/nul
git clone https://github.com/keydet89/RegRipper3.0.git
mv RegRipper3.0 regripper
mkdir /usr/share/regripper
ln -s /usr/local/src/regripper/plugins /usr/share/regripper/plugins 2>/dev/nul
chmod 755 regripper/* || exit
#Copy RegRipper Specific perl modules
cp regripper/File.pm /usr/share/perl5/Parse/Win32Registry/WinNT/File.pm
cp regripper/Key.pm /usr/share/perl5/Parse/Win32Registry/WinNT/Key.pm
cp regripper/Base.pm /usr/share/perl5/Parse/Win32Registry/Base.pm
#Create file rip.pl.linux from original rip.pl
#[ -f regripper/rip.pl ] && echo "rip.pl found!" || echo "rip.pl not found!"
#[ -f regripper/rip.pl ] && cp regripper/rip.pl rip.pl.linux || exit
cp regripper/rip.pl regripper/rip.pl.linux || exit
sed -i '/^#! c:[\]perl[\]bin[\]perl.exe/d' /usr/local/src/regripper/rip.pl.linux
sed -i "1i #!`which perl`" /usr/local/src/regripper/rip.pl.linux
sed -i '2i use lib qw(/usr/lib/perl5/);' /usr/local/src/regripper/rip.pl.linux
sed -i 's/\#push/push/' /usr/local/src/regripper/rip.pl.linux
sed -i 's/\#my\ \$plugindir/\my\ \$plugindir/g' /usr/local/src/regripper/rip.pl.linux
sed -i 's/\"plugins\/\"\;/\"\/usr\/share\/regripper\/plugins\/\"\;/' /usr/local/src/regripper/rip.pl.linux
sed -i 's/(\"plugins\")\;/(\"\/usr\/share\/regripper\/plugins\")\;/' /usr/local/src/regripper/rip.pl.linux
md5sum /usr/local/src/regripper/rip.pl.linux && echo "rip.pl.linux file created!"
# Copy rip.pl.linux to /usr/local/bin/rip.pl
cp regripper/rip.pl.linux /usr/local/bin/rip.pl && echo “ Success /usr/local/src/regripper/rip.pl.linux copied to /usr/local/bin/rip.pl”
/usr/local/bin/rip.pl && printf "\n\n Regipper file rip.pl has been changed!!\n Original file is located in /usr/local/src/regripper/rip.pl\n\n"

BIN
NIST_Data_Leakage_Case/NIST_Data_Leakage_08_CD_$MFT.pptx
View File

Binary file not shown.