All Projects → dyne → harvest

dyne / harvest

Licence: GPL-3.0 license
Tool to sort large collections of files according to common typologies

Programming Languages

shell
77523 projects
lua
6591 projects
c
50402 projects - #5 most used programming language
perl
6916 projects
Makefile
30231 projects

Projects that are alternatives of or similar to harvest

DFIR Resources REvil Kaseya
Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack
Stars: ✭ 172 (+437.5%)
Mutual labels:  forensics
qed
The scalable, auditable and high-performance tamper-evident log project
Stars: ✭ 87 (+171.88%)
Mutual labels:  forensics
GetConsoleHistoryAndOutput
An Incident Response tool to extract console command history and screen output buffer
Stars: ✭ 41 (+28.13%)
Mutual labels:  forensics
CRC-manipulator
Change CRC checksums of your files.
Stars: ✭ 73 (+128.13%)
Mutual labels:  forensics
lingtypology
R package for linguistic cartography and typological databases search
Stars: ✭ 47 (+46.88%)
Mutual labels:  typology
BlockHashLoc
Recover files using lists of blocks hashes, bypassing the File System entirely
Stars: ✭ 45 (+40.63%)
Mutual labels:  forensics
CCXDigger
The CyberCX Digger project is designed to help Australian organisations determine if they have been impacted by certain high profile cyber security incidents. Digger provides threat hunting functionality packaged in a simple-to-use tool, allowing users to detect certain attacker activities; all for free.
Stars: ✭ 45 (+40.63%)
Mutual labels:  forensics
AppmemDumper
Forensics triage tool relying on Volatility and Foremost
Stars: ✭ 22 (-31.25%)
Mutual labels:  forensics
flare-wmi
No description or website provided.
Stars: ✭ 399 (+1146.88%)
Mutual labels:  forensics
urlRecon
📝 urlRecon - Info Gathering or Recon tool for Urls -> Retrieves * Whois information of the domain * DNS Details of the domain * Server Fingerprint * IP geolocation of the server
Stars: ✭ 31 (-3.12%)
Mutual labels:  forensics
LogESP
Open Source SIEM (Security Information and Event Management system).
Stars: ✭ 162 (+406.25%)
Mutual labels:  forensics
cora-docs
CoRA Docs
Stars: ✭ 36 (+12.5%)
Mutual labels:  forensics
paragon apfs sdk ce
Paragon APFS SDK Free
Stars: ✭ 97 (+203.13%)
Mutual labels:  forensics
Judge-Jury-and-Executable
A file system forensics analysis scanner and threat hunting tool. Scans file systems at the MFT and OS level and stores data in SQL, SQLite or CSV. Threats and data can be probed harnessing the power and syntax of SQL.
Stars: ✭ 66 (+106.25%)
Mutual labels:  forensics
assemblyline
AssemblyLine 4 - File triage and malware analysis
Stars: ✭ 69 (+115.63%)
Mutual labels:  file-analysis
Packrat
Live system forensic collector
Stars: ✭ 16 (-50%)
Mutual labels:  forensics
Palmprint-Recognition-in-the-Wild
No description or website provided.
Stars: ✭ 22 (-31.25%)
Mutual labels:  forensics
MEAT
This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices
Stars: ✭ 101 (+215.63%)
Mutual labels:  forensics
dev
PHOIBLE data and development.
Stars: ✭ 90 (+181.25%)
Mutual labels:  typology
RdpCacheStitcher
RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.
Stars: ✭ 176 (+450%)
Mutual labels:  forensics

Harvest - manage large collections of files and dirs

Harvest makes it easy to list files and folders by type and copy or move them around.

Kant handle my swag

Harvest is a compact and portable script to scan files and folders and recognise their typology. Scanning is based on file extensions and a simple fuzzy logic analysis of folder contents (not just files) to recognise if they are related to video, audio or text materials, etc.

Harvest is fast: it can read approximately 1GB of stored filenames per second and is operated from the console terminal. It never modifies the filesystem: that is done explicitly by the user piping shell commands.

Software by Dyne.org

Harvest operates on folders containing files without exploding the files around: it assesses the typology of a folder from the files contained, but does not promote move the files outside of that folder. For instance it works very well to move around large collections of downloaded torrent folders.

💾 Installation

Harvest is a Zsh script and works on any POSIX platform where it can be installed including GNU/Linux, Apple/OSX and MS/Windows.

Install the latest harvest with:

curl https://raw.githubusercontent.com/dyne/harvest/main/harvest | sudo tee /usr/local/bin/harvest

Dependencies: zsh

Optional:

  • fuse tmsu for tagged filesystem
  • setfattr for setting file attributes

🎮 Usage

Scan a folder /PATH/ to show and save results

 harvest scan [PATH]

List of supported category types:

 code image video book text font web archiv sheet exec slide audio

Move all scanned text files in /PATH/ to /DEST/

 harvest scan [PATH] | grep ';text;' | xargs -rn1 -I% mv % [DEST]

Tag all file attributes in /PATH/ with harvest.type categories

 harvest attr [PATH]

Tag all files for use with TMSU (See section below about TMSU)

 harvest tmsu [PATH]

TMSU

This implementation supports tagged filesystems using TMSU.

To allow the navigation of files in the style of a Semantic Filesystem, Harvest supports TMSU, an small utility to maintain a database of tags inside an hidden directory .tmsu in each harvested folder.

To initialise a tmsu database bootstrapped with harvest's tags in the currently harvested folder, do:

harvest tmsu

Directories indexed this way can then be "mounted" (using fuse) and navigated:

harvest mount

Inside the $harvest hidden subfolder (pointing to .mnt inside the folder) tags will become folders containing symbolic links to the actual tagged files. Any filemananger following symbolic links can be used to navigate tags, also tags will be set as bookmarks in graphical filemanagers (GTK3 supported).

In addition to the tags view, there is also a queries folder in which you can run view queries by listing or creating new folders:

ls -l "$harvest/queries/text and 2018"

This automatic creation of the query folders makes it possible to use new file queries within the file chooser of a graphical program simply by typing the query in. Unwanted query folders can be safely removed.

Limited tag management is also possible via the virtual filesystem. For example one can remove specific tags from a file by deleting the symbolic link in the tag folder, or delete a tag by performing a recursive delete.

To unmount all TMSU semantic filesystems currently mounted, just do:

harvest umount

Further TMSU operations are possible operating directly from inside the directories that have been indexed using harvest tmsu, for more information see tmsu help. For instance, TMSU also detects duplicate files using tmsu dupes.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].