Skip to end of metadata
Go to start of metadata
Blade Tutorials

Solutions to frequently asked questions and queries about Blade:

Page: Converting an EnCase e01 Image to a Flat File DD Image — From time to time, it may be necessary to convert an EnCase (or other Expert Witness image) back to a standard non-proprietary format.  This Professional Recovery Module is FREE with the purchase of any other professional module.  The E01 Image Converter will take any Expert Witness source image and convert it into a single or segmented flat file image.  The module also has the option to MD5/SHA1 the output and compare it with the hashes embedded within the original image file.
Page: Creating Blade Data Recovery Profiles — This article explains how to create a Blade Recovery profile for a bespoke data recovery scenario.  It guides the user through creating a profile and explains the essential elements.
Page: Exporting and Importing Blade Recovery Profiles — One of the nice features of Blade is the ability to exchange Recovery Profiles with colleagues and other digital forensic practitioners.  The processing of Exporting and Importing profiles is relatively simple.
Page: Processing a Segmented Image using Blade — This article explains how to process a segmented dd image.  Blade can process multi-segment DD disk images as if they were from a monolithic disk image. 
Page: Recovering Apple Safari History Binary PList (Property List) Files —
In the Mac OS X Cocoa, NeXTSTEP, and GNUstep programming frameworks, property list files are files that store serialized objects.  Property list files use the filename extension .plist, and are therefore often referred to as plist files.  Property list files are often used to store a user's settings.  They are also used to store information about bundles and applications, a task served by the resource fork in the old Mac OS.

Below are the 150 labels used in Blade v1.x listed alphabetically. Click on a label to see its associated content.
A-B
adobe, america-online, aol, apple, attachments, authenticode, base64, binary, blade, browser, bug
C
cabinet, carve, carving, change-log, changelog, comparison, conversion, convert
D
data, dd, deconstruction, deleted, demo, dfr, digital, digits, dotnet, download, dr, dumps
E
e-mail, e01, email, eml, eml-extract, emlx, encase, error, evaluation, ewf, expert-witness-file, export, express
F-G
faq, faqs, fdr, file-format, filesystem, filing, fix, forensic, forensic-image, framework, group, guide
H-J
hash, hashing, help, image, import, info2, install, installation, intelli-carve, iso-base-media-format, jpeg, jpg
K
kb-blog, kb80005, kb80012, kb80016, kb80027, kb80055, kb80056, kb80057, kb80058, kb80059, kb80060, kb80061, kb80063, kb80064, kb80066, kb80078, kb80081, kb80094, kb80102, kb80109, konvertieren
L-M
limitations, link-file, linkfile, lnk, management, manual, md5, memory, message, messages, microsoft, mpeg-4, msoe
N-O
news, notes, oe, options, os, outlook, outlook-express
P-R
pdf, personal, personal-filing-cabinet, pfc, plist, problem, process, profile, propert-list, quick-start, recovery, release, release-notes, requirements
S
safari, scalpel, segment, segmented, segments, setup, sha-1, sha-256, sha-512, share, shortcut, shortcut-file, signature, solve, start, support, supported, system
T-Z
tutorial, tutorials, user, version, windows, word
0-9
32bit, 3gp, 64bit