# Installer bulk_extractor avec Homebrew, MacPorts, Nix, zypper

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de bulk_extractor pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:bulk_extractor
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install bulk_extractor
```

  Preuve: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install bulk_extractor
```

  Preuve: MacPorts ports tree: security/bulk_extractor/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#bulk_extractor
```

  Preuve: nixpkgs package indexes: pkgs/by-name/bu/bulk_extractor/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- zypper (92%):

```sh
sudo zypper install bulk_extractor
```

  Preuve: openSUSE Tumbleweed package metadata: bulk_extractor from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## Faits du paquet

- **Clé du paquet:** brew:bulk_extractor
- **Gestionnaire de paquets:** Homebrew
- **Page du gestionnaire de paquets:** <https://formulae.brew.sh/formula/bulk_extractor>
- **Version:** 2.1.1
- **Résumé source:** Stream-based forensics tool
- **Page d'accueil:** <https://github.com/simsong/bulk_extractor/wiki>
- **Dépôt:** <https://github.com/simsong/bulk_extractor>
- **Docs amont:** <https://github.com/simsong/bulk_extractor/wiki>
- **Licence:** MIT
- **Archive source:** <https://github.com/simsong/bulk_extractor/releases/download/v2.1.1/bulk_extractor-2.1.1.tar.gz>
- **Dernière mise à jour:** 2026-05-13T00:05:26Z
- **Généré:** 2026-08-04T22:13:35+00:00

## exécutables

- bulk_extractor (cli)
- bulk_extractor (alias)

## Dépendances de compilation

- pkgconf
- re2

## Bibliothèques fournies par macOS

- expat
- ncurses

## Comportement d'installation

- hook post-installation: non défini
- Bouteille: disponible sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Version et fraîcheur

- page générée: 2026-08-04
- version du gestionnaire: 2.1.1
- gestionnaire mis à jour: 2026-05-13
- données locales: OK
- dépôt amont: https://github.com/simsong/bulk_extractor
- info: No cached GitHub release or tag data was available.
## Historique du projet et usages

bulk_extractor is a stream-based digital-forensics tool that scans raw media, disk images, files, and directories for structured artifacts without first depending on filesystem parsing. It is historically important because it made bulk data analysis a fast triage step in forensic workflows.

### Historique du projet

bulk_extractor predates its current GitHub repository. The NEWS file includes 2010 release announcements for versions 0.4.2 through 0.7.0, with features such as context stop lists, compressed-data carving, crash protection, POSIX threading, ZIP/GZIP/PDF recovery, and hibernation-file extraction.

The `simsong/bulk_extractor` repository was created on 2012-04-03. The README describes the tool as a high-performance digital forensics exploitation tool that extracts email addresses, credit card numbers, JPEGs, JSON snippets, search terms, and other features, storing results in text files and histograms for inspection and downstream processing.

The README recommends citing Simson Garfinkel's 2013 Computers & Security paper, `Digital Media Triage with Bulk Data Analysis and bulk_extractor`, which formalized the technique and helped anchor the tool in academic and law-enforcement forensic practice.

### Historique d'adoption

Adoption came from forensic triage needs: investigators could run bulk_extractor against disk images or memory artifacts and quickly get feature files, histograms, and leads without mounting or interpreting the filesystem first.

The project also included BEViewer for inspecting output, documented production downloads through GitHub releases, and kept packaging-friendly build instructions for Unix-like systems. Package managers such as Homebrew, MacPorts, Nix, and openSUSE carry it because forensic analysts and security researchers often need repeatable installs on analysis workstations.

### Modes d'utilisation

Users point `bulk_extractor` at a disk image, file, directory, or other data source and review generated feature files and reports. It recursively examines decoded data, which lets it find artifacts in compressed, encoded, or carved content that simpler scanners miss.

The tool supports scanner selection, histograms, debugging environment variables, and VM-based build recipes. Modern 2.x development requires C++17 and uses submodules such as be13_api and DFXML.

### Pourquoi les passionnés de paquets s'y intéressent

bulk_extractor is significant because it packages a research-grade forensic idea into a normal CLI: scan every byte, extract features, and produce plain text output. That combination makes it useful both in investigations and in scripted security pipelines.

For package nerds, it is also a classic example of a domain-specific tool with deep native-code build requirements, academic provenance, GUI adjuncts, and long-lived release history that still belongs in general-purpose package managers.

### Chronologie

- 2010: 0.4.x through 0.7.0 release announcements document early stop-list, carving, threading, and crash-protection work.
- 2012: Public `simsong/bulk_extractor` GitHub repository is created.
- 2013: Computers & Security publishes the bulk data analysis and bulk_extractor paper cited by the project.
- 2024: 2.1.1 release notes document ongoing 2.x maintenance.
- 2026: The repository remains active as the development tree for current bulk_extractor work.

### Related projects

- bulk_extractor is related to BEViewer, DFXML, be13_api, forensic carving tools, disk-image analysis workflows, memory and hibernation-file analysis, and downstream feature-file processing scripts.

### Sources

- <https://api.github.com/repos/simsong/bulk_extractor>
- <https://github.com/simsong/bulk_extractor#readme>
- <https://github.com/simsong/bulk_extractor/blob/main/NEWS>
- <https://github.com/simsong/bulk_extractor/wiki>


## Notes de sécurité

Aucun manifest local de gestion des secrets correspondant n'a été trouvé pour bulk_extractor. Les métadonnées de paquet restent publiées ici afin que la couverture future dispose d'une URL stable.


## Détails de la base source

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** bulk_extractor
- **Version Scheme:** 0
- **Revision:** 3
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## Autres enregistrements de gestionnaires de paquets

- Nix - bulk_extractor: normalized package name match | nixpkgs package indexes: pkgs/by-name/bu/bulk_extractor/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- zypper - bulk_extractor - 2.1.1-1.4: normalized package name match | openSUSE Tumbleweed package metadata: bulk_extractor from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Bulk Email and URL extraction tool | https://github.com/simsong/bulk_extractor/wiki/Introducing-bulk_extractor
- MacPorts - bulk_extractor: normalized package name match | MacPorts ports tree: security/bulk_extractor/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## Liens liés

- [Source-control packages](https://pkg.so/fr/source-control-tools/) - Belongs to a source-control command family.
- [Terminal utility packages](https://pkg.so/fr/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://pkg.so/fr/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Database and data packages](https://pkg.so/fr/database-data-tools/) - Matched database, SQL, migration, or data-store metadata.
- [pkgconf](https://pkg.so/fr/brew/pkgconf/) - Build dependency declared by Homebrew.
- [sleuthkit](https://pkg.so/fr/brew/sleuthkit/) - Shares pkgdb curated category or tags: cli, digital-forensics, disk-analysis, security.
- [libewf](https://pkg.so/fr/brew/libewf/) - Shares pkgdb curated category or tags: cli, digital-forensics, security.
- [regipy](https://pkg.so/fr/brew/regipy/) - Shares pkgdb curated category or tags: cli, digital-forensics, security.
- [hack-browser-data](https://pkg.so/fr/brew/hack-browser-data/) - Shares pkgdb curated category or tags: cli, data-extraction, security.
- [mac-robber](https://pkg.so/fr/brew/mac-robber/) - Shares pkgdb curated category or tags: cli, digital-forensics, security.
- [openssl@3](https://pkg.so/fr/brew/openssl-3/) - Shares pkgdb curated category or tags: cli, security.
- [gnutls](https://pkg.so/fr/brew/gnutls/) - Shares pkgdb curated category or tags: cli, security.
- [p11-kit](https://pkg.so/fr/brew/p11-kit/) - Shares pkgdb curated category or tags: cli, security.

## Combined YAML source

View the package source record on GitHub. [combined/bulk_extractor.yml](https://github.com/mxcl/pkgdb/blob/main/combined/bulk_extractor.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph