论文标题
锐化工具:更新2020年代的Bulk_Extractor
Sharpening Your Tools: Updating bulk_extractor for the 2020s
论文作者
论文摘要
Bulk_extractor是用C ++编写的高性能数字取证工具。在2018年至2022年之间,我们将程序从C ++ 98更新为C ++ 17,进行了完整的代码重构,并采用了单元测试框架。新版本通常以75 \%的吞吐量运行,我们将其归因于改进的多线程。我们为其他数字取证工具维护者提供课程和建议。
Bulk_extractor is a high-performance digital forensics tool written in C++. Between 2018 and 2022 we updated the program from C++98 to C++17, performed a complete code refactoring, and adopted a unit test framework. The new version typically runs with 75\% more throughput than the previous version, which we attribute to improved multithreading. We provide lessons and recommendations for other digital forensics tool maintainers.