English

Sharpening Your Tools: Updating bulk_extractor for the 2020s

Cryptography and Security 2022-08-04 v1

Abstract

Bulk_extractor is a high-performance digital forensics tool written in C++. Between 2018 and 2022 we updated the program from C++98 to C++17, performed a complete code refactoring, and adopted a unit test framework. The new version typically runs with 75\% more throughput than the previous version, which we attribute to improved multithreading. We provide lessons and recommendations for other digital forensics tool maintainers.

Cite

@article{arxiv.2208.01639,
  title  = {Sharpening Your Tools: Updating bulk_extractor for the 2020s},
  author = {Simson Garfinkel and Jonathan Stewart},
  journal= {arXiv preprint arXiv:2208.01639},
  year   = {2022}
}
R2 v1 2026-06-25T01:25:27.280Z