Over 2 years ago there was much talk about a program named Shadow Analyser
http//
Does anyone know whether the tool was released or did the project not complete?
Thanks and regards
Dan
We killed the project for reasons that I'm not prepared to discuss. I apologize if this caused anyone problems.
If you need an alternative, try
http//
It's still experimental, but who knows, it might do the job for you.
Well to be honest if Steggals had anything to do with it I'm not surprized it failed.
If you need an alternative, try
http//code.google.com/p/libvshadow/ It's still experimental, but who knows, it might do the job for you.
I fully support this. I should have recommended it previously. Sorry Joachim.
Well to be honest if Steggals had anything to do with it I'm not surprized it failed.
Why the hate on Simon? He's a good guy. Never really heard him say anything bad about anyone in 1.5 years of working for him.
Haters gonna hate…
I fully support this. I should have recommended it previously. Sorry Joachim.
No problem, if you have information from the Shadow Analyser project that you are willing and able to share just ping me on mail. If it can help to improve libvshadow, that could benefit us all.
While I did like the Shadow Analyzer project when I got a chance to look at it, things have come a long way since then. I'm not entirely sure why folks need separate apps when everything you need to access VSCs within acquired images are freely available, and some is even native to your Windows analysis system.
I thought we would have seen an offline parser by now. I guess either the format isnt documented well enough or noone can see the benefit