===RUNNING bulk_extractor.exe===
1. Download bulk_extractor.zip
2. Unzip everything in a directory
3. Run bulk_extractor.exe; it depends on three DLLs:
   cygcrypto-0.9.8.dll
   cygwin1.dll
   cygz.dll

4. Run it. Have fun!

================================================================
Compiling bulk_extractor.exe from sources under cygwin:

Getting bulk_extractor running under cygwin:

bulk_extractor uses two important libraries:
	--- libewf (to read EnCase files) 
	--- AFFLIB (to give a page abstraction over the EnCase files, and AFF files, and more)

libewf is developed by Bas Kloet, Joachim Metz, and Robert-Jan Mora in .NL. 

If you only want to read RAW and AFF files, you can omit the libewf. You can also add it later, but you will need to recompile AFFLIB.

You will need:
 * make  (In Cygwin Devel)
 * openssl-dev (for AFFLIB)
 * libtool (I'm not positive you need it, but it won't hurt)
 * A /src directory (for libewf & aff)


2. Download and install libewf
put this file: http://www.uitwisselplatform.nl/frs/download.php/529/libewf-20080501.tar.gz

into /src

$ cd /src
$ tar xfvz libewf-20080501.tar.gz
$ cd libewf-20080501
$ ./configure
$ make && make install

3. Download AFF from http://www.afflib.org/afflib.tar.gz to /src

$ cd /src
$ tar xfvz afflib.tar.gz
$ cd afflib-*
$ ./configure
$ make && make install

4. Download bulk_extractor-0.0.5.tar.gz from http://www.afflib.org/ to /src

$ cd /src
$ tar xfvz bulk_extractor-0.0.5.tar.gz
$ cd bulk_extractor-0.0.5
$ ./configure
$ make

Now the program is in src/bulk_extractor.exe


If this is too much work, you can just download bulk_extractor.exe from http://www.afflib.org/downloads/

That version requires the Cygwin DLL.

S. Garfinkel
August 8, 2008