diff --git a/Help/scripts/RegRipper30-apt-git-Install.sh b/Help/scripts/RegRipper30-apt-git-Install.sh new file mode 100644 index 0000000..e10ca8a --- /dev/null +++ b/Help/scripts/RegRipper30-apt-git-Install.sh @@ -0,0 +1,40 @@ +#Installs Regripper 3.0 on Ubuntu and other Debian based systems that use the "APT" package manager +#Installs latest RegRipper3.0 +#Installs win32-registry-perl + +echo sudo is required +echo git is required +echo apt is required +which git || exit +which apt || exit +apt-get install -y libparse-win32registry-perl -y +# Downloads RegRipper3.0 and moves file into /usr/local/src/regripper and "chmods" files in regripper directory to allow execution +cd /usr/local/src/ +sudo rm -r /usr/local/src/regripper/ 2>/dev/nul +sudo rm -r /usr/share/regripper/plugins 2>/dev/nul +git clone https://github.com/keydet89/RegRipper3.0.git +mv RegRipper3.0 regripper +mkdir /usr/share/regripper +ln -s /usr/local/src/regripper/plugins /usr/share/regripper/plugins 2>/dev/nul +chmod 755 regripper/* || exit +#Copy RegRipper Specific perl modules +cp regripper/File.pm /usr/share/perl5/Parse/Win32Registry/WinNT/File.pm +cp regripper/Key.pm /usr/share/perl5/Parse/Win32Registry/WinNT/Key.pm +cp regripper/Base.pm /usr/share/perl5/Parse/Win32Registry/Base.pm + +#Create file rip.pl.linux from original rip.pl +#[ -f regripper/rip.pl ] && echo "rip.pl found!" || echo "rip.pl not found!" +#[ -f regripper/rip.pl ] && cp regripper/rip.pl rip.pl.linux || exit +cp regripper/rip.pl regripper/rip.pl.linux || exit +sed -i '/^#! c:[\]perl[\]bin[\]perl.exe/d' /usr/local/src/regripper/rip.pl.linux +sed -i "1i #!`which perl`" /usr/local/src/regripper/rip.pl.linux +sed -i '2i use lib qw(/usr/lib/perl5/);' /usr/local/src/regripper/rip.pl.linux +sed -i 's/\#push/push/' /usr/local/src/regripper/rip.pl.linux +sed -i 's/\#my\ \$plugindir/\my\ \$plugindir/g' /usr/local/src/regripper/rip.pl.linux +sed -i 's/\"plugins\/\"\;/\"\/usr\/share\/regripper\/plugins\/\"\;/' /usr/local/src/regripper/rip.pl.linux +sed -i 's/(\"plugins\")\;/(\"\/usr\/share\/regripper\/plugins\")\;/' /usr/local/src/regripper/rip.pl.linux +md5sum /usr/local/src/regripper/rip.pl.linux && echo "rip.pl.linux file created!" + +# Copy rip.pl.linux to /usr/local/bin/rip.pl +cp regripper/rip.pl.linux /usr/local/bin/rip.pl && echo “ Success /usr/local/src/regripper/rip.pl.linux copied to /usr/local/bin/rip.pl” +/usr/local/bin/rip.pl && printf "\n\n Regipper file rip.pl has been changed!!\n Original file is located in /usr/local/src/regripper/rip.pl\n\n" diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_08_CD_$MFT.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_08_CD_$MFT.pptx index 360e22d..70516b5 100644 Binary files a/NIST_Data_Leakage_Case/NIST_Data_Leakage_08_CD_$MFT.pptx and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_08_CD_$MFT.pptx differ