simsong/bulk_extractor

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1415 stars · 219 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

bulk_extractor is a high-performance digital forensics tool that rapidly scans disk images, files, and directories to extract structured information like email addresses, credit card numbers, JPEGs, and JSON snippets without parsing file systems. It recursively probes and decompresses data to find encoded artifacts that traditional carving tools miss, outputting results as easily searchable text files and histograms.

Use cases

• extract email addresses and credit card numbers from disk images
• carve JPEGs and BASE64-encoded files from forensic evidence
• scan unallocated disk space for structured data without file system parsing
• generate histograms of search terms and email addresses for investigations
• recursively decompress and scan compressed data streams in evidence files

When to choose

• you need fast, file-system-agnostic extraction of features from disk images or arbitrary data
• you want to find encoded or compressed artifacts that standard carving tools miss
• you need text-file outputs and histograms suitable for investigative workflows

When to avoid

• you need a GUI-driven forensic suite with case management
• you require native support on unsupported platforms like Debian 10
• you want a tool that parses file system structures rather than raw content

Facets

cli-tool · maturity active

parser search-engine data-science security files cli digital-forensics data-carving disk-images feature-extraction law-enforcement forensics linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="simsong/bulk_extractor")