BEViewer

Bulk Extractor Viewer (BEViewer) is a User Interface for browsing features that have been extracted via the bulk_extractor feature extraction tool. BEViewer supports browsing multiple images and bookmarking and exporting features. BEViewer also provides a UI for launching bulk_extractor scans.

Table of Contents Running BEViewer Version Information New Capability Still to be done

Running BEViewer

Obtain BEViewer from https://github.com/simsong/bulk_extractor. Run the .jar file from the command line with more memory than Java provides by default by typing java -Xmx1g -jar BEViewer.jar from the command line.

Version Information

The Version of BEViewer currently at https://github.com/simsong/bulk_extractor is V0.2.17_Beta.

New Capability

• Features have been corrected to no longer show escape codes.
• Feature formatters provide readable output for specific feature types: GPS, EXIF. To be done: IP, TCP, JSON.
• BEViewer is now compatible with bulk_extractor v1.2 and is expected to be forward-compatible with bulk_extractor v1.3.
• User Interface usability has been improved.
• Misc. capability has been added: the ability to scan from a Raw Device on Linux, the ability to print Feature content.

Still to be done

• Feature formatters are still required for IP, TCP, and JSON feature formats.
• BEViewer will be able to accept command-line input parameters during invocation. In particular, input -r "bulk_extractor parameters" will start a bulk_extractor scan when BEViewer starts.
• The printing of features still needs work.