Pdf metadata viewer control software system web page windows azure console forensic-explorer-user-guide.en21-part1480

Ch a p t e r 1 7 – R e p o r t s M o d u l e

211 | Page

In the table selection window, use the ͞Grid Table͟ to that files in the

bookmark folder (i.e. pictures) are entered horizontally across the screen in

the gallery view format:

Figure 173, Selecting a Gallery View Table Style

(The direction of the repeating records is indicated by the color shading).

Double click to select the Filename field to add to the report:

Figure 174, Select table fields

Click OK to proceed and the table will be inserted into the report.

Right click on the pictures folder to confirm the levels on which the table will

operate. Fully Recursive and Include Items Only will operate on all files in all

subfolders:

Pdf metadata viewer - add, remove, update PDF metadata in C#.net, ASP.NET, MVC, Ajax, WinForms, WPF

Allow C# Developers to Read, Add, Edit, Update and Delete PDF Metadata

view pdf metadata in explorer; get pdf metadata

Pdf metadata viewer - VB.NET PDF metadata library: add, remove, update PDF metadata in vb.net, ASP.NET, MVC, Ajax, WinForms, WPF

Enable VB.NET Users to Read, Write, Edit, Delete and Update PDF Document Metadata

google search pdf metadata; preview edit pdf metadata

212 | Page

Ch a p t e r 1 7 – R e p o r t s M o d u l e

Click on the Preview tab of the Report editor to preview the report. The

Filename will be repeated in the table across the page, as shown below:

In the Reportable Items > Filename window, select a file and drag and drop it

into the first cell of the table. Select to insert field as Graphic. The picture will

now display in the first cell of the table. Use the formatting tools (alignment,

font etc.) to adjust as necessary. Add a title if required.

VB.NET PDF - WPF PDF Viewer for VB.NET Program

C#.NET PDF Create, C#.NET PDF Document Viewer, C#.NET PDF Windows Viewer, C#.NET search text in PDF, C#.NET edit PDF bookmark, C#.NET edit PDF metadata, C#.NET

delete metadata from pdf; extract pdf metadata

VB.NET PDF- View PDF Online with VB.NET HTML5 PDF Viewer

C#.NET PDF Create, C#.NET PDF Document Viewer, C#.NET PDF Windows Viewer, C#.NET search text in PDF, C#.NET edit PDF bookmark, C#.NET edit PDF metadata, C#.NET

pdf metadata extract; pdf xmp metadata editor

Ch a p t e r 1 7 – R e p o r t s M o d u l e

213 | Page

17.5.2

NESTED TABLES

More complex reports where records are group by folders require nested tables. For

example, to group the following bookmark structure by first level folders (Cats and

Dogs):

a nested table is required. Figure 175 below describes the layout:

Figure 175, Layout of a Nested Table

PICTURES (Root Folder)

CATS (Group by bookmark folder 1 at level 1)

File Name

Created Date

CAT1.JPG (Folder 1, Record 1)

Created Date

CAT2.JPG (Folder 1, Record 2)

Created Date

CAT3.JPG (Folder 1, Record 3)

Created Date

DOGS (Group by bookmark folder 2 at level 1)

File Name

Created Date

DOG1.JPG (Folder 2, Record 1)

Created Date

DOG2.JPG (Folder 2, Record 1)

Created Date

DOG3.JPG (Folder 2, Record 1)

Created Date

How to C#: Modify Image Metadata (tag)

C#.NET PDF Create, C#.NET PDF Document Viewer, C#.NET PDF Windows Viewer, C#.NET search text in PDF, C#.NET edit PDF bookmark, C#.NET edit PDF metadata, C#.NET

change pdf metadata creation date; pdf metadata viewer

C# PDF Library SDK to view, edit, convert, process PDF file for C#

RasterEdge WPF PDF Viewer provides C# users abilities to view, annotate, convert and create PDF in WPF application. C#.NET: Edit PDF Metadata.

add metadata to pdf programmatically; add metadata to pdf file

C# WPF PDF Viewer SDK to view, annotate, convert and print PDF in

PDF Online. Convert PDF Online. WPF PDF Viewer. View PDF in Image to PDF. Image: Remove Image from PDF Page. Edit URL. Bookmark: Edit Bookmark. Metadata: Edit, Delete

get pdf metadata; remove pdf metadata online

C# TIFF: TIFF Metadata Editor, How to Write & Read TIFF Metadata

C# TIFF - Edit TIFF Metadata in C#.NET. Allow Users to Read and Edit Metadata Stored in Tiff Image in C#.NET Application. How to Get TIFF XMP Metadata in C#.NET.

clean pdf metadata; rename pdf files from metadata

Ch a p t e r 1 8 – S c r i p t s M o d u l e

215 | Page

Chapter 18 – Scripts Module

In This Chapter

CHAPTER 18

- SCRIPTS MODULE

18.1

Scripts Module ................................................................................................................................. 216

18.1.1

Scripts Window .............................................................................................................. 217

18.1.2

Script Editor window ..................................................................................................... 220

18.1.3

Messages Window (Console) ........................................................................................ 221

18.2

Managing scripts in the scripts window .......................................................................................... 222

18.3

Introduction to Scripting ................................................................................................................. 223

18.3.1

Programming Comments............................................................................................... 223

18.3.2

Reserved Words ............................................................................................................ 223

18.3.3

Uses (libraries) ............................................................................................................... 224

18.3.4

Const .............................................................................................................................. 224

18.3.5

Var ................................................................................................................................. 225

18.3.6

Procedures and Functions ............................................................................................. 225

18.3.7

Begin and End ................................................................................................................ 225

18.3.8

Errors ............................................................................................................................. 226

C# HTML5 PDF Viewer SDK to view PDF document online in C#.NET

PDF Online. Convert PDF Online. WPF PDF Viewer. View PDF in Image to PDF. Image: Remove Image from PDF Page. Edit URL. Bookmark: Edit Bookmark. Metadata: Edit, Delete

batch pdf metadata; pdf metadata reader

VB.NET PDF Library SDK to view, edit, convert, process PDF file

PDF Metadata Edit. Offer professional PDF document metadata editing APIs, using which VB.NET developers can redact, delete, view and save PDF metadata.

remove metadata from pdf file; pdf xmp metadata viewer

216 | Page

Ch a p t e r 1 8 – S c r i p t s M o d u l e

18.1

SCRIPTS MODULE

Forensic Explorer utilizes Pascal as its scripting language. Scripts are written and run in

the scripts module, or launched in other modules via toolbar buttons or by other

scripts. The Scripts module is accessed via the scripts tab:

Figure 176, Scripts module tab

The scripts module is arranged into three windows: Scripts; Script Editor; and

Messages, as shown in Figure 177 below:

Figure 177, Scripts module

Ch a p t e r 1 8 – S c r i p t s M o d u l e

217 | Page

18.1.1

SCRIPTS WINDOW

The script window lists available .pas (Pascal) scripts and their attributes.

Figure 178, Scripts Windows showing .pas file attributes

Script Attributes

The Scripts window lists the attributes of each script:

Name: The script name is auto-generated from the ͞script.pas͟ file name.

Description and Author: These attributes are auto-generated from the

comments at the start of the script.

Modified and Created: Script dates are auto-generated from the Windows

date and time stamps of the .pas file.

Hash (SHA256): A SHA256 hash is calculated for each script. The hash is

updated each time the Scripts window is refreshed. To manually refresh the

Scripts window, right click in the Scripts window and select Refresh option

from the drop down menu.

The purpose of the SHA256 has is so that the investigator can validate the

authenticity of a GetData script, or a script from a trusted third party. GetData

script hashes are published at http://www.forensicexplorer.com/scripts.php.

If an installed script differs from the hash published on the web page it means

that the content of the script has changed.

Forensic Explorer is installed with a number of default scripts in the \Users\[user

folder]\Documents\Forensic Explorer\ path. Scripts are separated into folders,

depending on their function. These include Filters, Scripts and Startup, as described

below.

The scripts window is where scripts are create, copied, renamed and deleted.

218 | Page

Ch a p t e r 1 8 – S c r i p t s M o d u l e

FILTERS

Filters are scripts which perform the specific task of filtering displayed results to show

only files specified in the filter criteria. The filter scripts are listed in the drop down bar

of a Folders view, as shown in Figure 179 below for the File System module (filters can

be applied in Folders view of other modules, including Email and Registry):

Figure 179, Tree view filter (File System Folders view)

The JPEG Files by EXT.pas filter is shown below. A result of ͞1͟ is used to display

content. A result of ͞-1͟ is used to hide content:

begin

filename := uppercase(anEntry.Entryname);

fileext := extractfileext(filename); // tests for specific extension

if (fileext = '.JPG') then

Result := 1; // 1 = display, -1 = hide

end;

The filter can easily be modified to add additional file types.

SCRIPTS

Default scripts are separated into subfolders depending the module in which they are

used or their function.

SCRIPTS\COMMON\

The Scripts\Common\ folder is used to hold scripts that are frequently called by other

scripts.

The Scripts\Common\Toolbar folder contains the scripts used to manage the default

toolbar button navigation system provided with Forensic Explorer:

Ch a p t e r 1 8 – S c r i p t s M o d u l e

219 | Page



The default Startup.pas file (described above) initiates the creation of

toolbars and buttons by calling scripts in the Common\Toolbar\ folder;



Toolbar buttons are then managed by the Scripts\Common\Toolbar

Manager.pas.

SCRIPTS\FILE SYSTEM\

The Scripts\File System\ folder contains default scripts which used in the File System

module. This includes Hashing, Exporting and Skin Tone Analysis.

Sub-folders include:

Scripts\File System\Disk view

The ͞..\FileSystem\Disk View\͟ sub-folder contains scripts used to change

block color in the Disk View window of the File System module. Colours are

assigned using the color reference chart:

http://en.wikipedia.org/wiki/Web_colors

SCRIPTS\REGISTRY\

The Scripts\Registry\ folder contains default scripts used to extract information from

registry keys. The processing script is ͞Registry Key Processor.pas͟.

SCRIPTS\SCRIPTS\

Scripts\Scripts\ contains default scripts used in the Scripts module.

STARTUP

The Startup folder contains the script startup.pas (..\[User

Profile]\Documents\Forensic Explorer\Startup\startup.pas͟).

The purpose of startup.pas script is to automatically run when Forensic Explorer is

launched and configure the interface. It can be individually configured by the

investigator. For more information, see 18.4 below.

220 | Page

Ch a p t e r 1 8 – S c r i p t s M o d u l e

18.1.2

SCRIPT EDITOR WINDOW

A .pas file selected in the Script window will display its content in the Script Editor. A

script can be opened directly from the editor, or a new script created in the editor. The

functions of the editor are primarly controlled by the toolbar at the top of the Script

Editor window. The button functions are as follows:

Save an existing script (a script is also saved when it is run). This button is only

active when a script has been modified but not saved.

Undo last.

Redo last.

Cut text.

Copy text.

Paste from clipboard.

Change font.

Search for text.

Replace text.

(Save and) Run script as a single thread.

Run a threaded script.

Break point a script.

Compile current script.

Cancel the execution of the script.

Enter script parameters, e.g. ͞Parameter One͟ ͞Two͟ ͞Three͟ ͞Four͟

Documents you may be interested