The NW3C Utility Suite is a collection of software products that are distributed
free of charge to law enforcement. The included utilities and their descriptions
are listed below.
USN Journal Converter
:
Current Version: v2.0.1
This utility allows the user to convert the output from either “Fsutil” or “USNDump” into a standard spreadsheet format for easier analysis
Recycle Bin Parser
:
Current Version: v1.0.3
This utility allows the user to quickly analyze the metadata and files found within the Windows Recycle Bin.
Quick Hashing Utility
:
Current Version: v1.0.3
This utility allows the user to quickly hash a file, a string, or hex values. The supported hash algorithms are: MD5, SHA1, SHA256, SHA384, SHA512, RIPEMD160, CRC32 (Hex), and CRC32 (Decimal)
Batch Hashing Utility
:
Current Version: v1.0.2
This utility allows the user to quickly hash the contents of a directory (selected directories can also be processed recursively). Once processed, the hashed values can be saved to a spreadsheet for later analysis. The supported hash algorithms are: MD5, SHA1, SHA256, SHA384, SHA512, RIPEMD160, CRC32 (Hex), and CRC32 (Decimal)
Hex Viewer
:
Current Version: v1.0.1
This utility is a basic hex viewer, which allows the user to view a file in a standard hexadecimal/ASCII format. The user can search for specific values, as well as copy/paste any hexadecimal or ASCII value(s).
Date/Time Utility
:
Current Version: v1.0.2
This utility allows the user to quickly convert between multiple date/time formats found during Computer and Mobile Forensics. Supported formats include: “Standard” date/time format, Unix, Mac Absolute Time, Windows File Time, HFS+ File Time, PRTime, Webkit, and more. In addition, the utility allows for conversion of custom date/time formats which allows the user to enter a custom epoch value.
SQLite Extraction Utility
:
This utility allows the user to export the data stored within a SQLite table to a spreadsheet.