guymager - Imager for forensic media acquisition

Property Value
Distribution Fedora 25
Repository CERT Forensics Tools x86_64
Package name guymager
Package version 0.8.1
Package release 1.fc25
Package architecture x86_64
Package type rpm
Installed size 1.04 MB
Download size 352.50 KB
Official Mirror
guymager is an imager for forensic media acquisition. Its main features are:
* Easy user interface in different languages
* Runs under Linux
* Multi-threaded design, multi-threaded data compression
* Makes full usage of multi-processor machines
* Generates flat (dd) and EWF (E01) images


Package Version Architecture Repository
guymager-0.8.8-1.fc25.i686.rpm 0.8.8 i686 CERT Forensics Tools
guymager-0.8.8-1.fc25.x86_64.rpm 0.8.8 x86_64 CERT Forensics Tools
guymager-0.8.7-2.fc25.i686.rpm 0.8.7 i686 CERT Forensics Tools
guymager-0.8.7-2.fc25.x86_64.rpm 0.8.7 x86_64 CERT Forensics Tools
guymager-0.8.7-1.fc25.i686.rpm 0.8.7 i686 CERT Forensics Tools
guymager-0.8.7-1.fc25.x86_64.rpm 0.8.7 x86_64 CERT Forensics Tools
guymager-0.8.4-1.fc25.i686.rpm 0.8.4 i686 CERT Forensics Tools
guymager-0.8.4-1.fc25.x86_64.rpm 0.8.4 x86_64 CERT Forensics Tools
guymager-0.8.1-1.fc25.i686.rpm 0.8.1 i686 CERT Forensics Tools
guymager - - -


Name Value - - - - - - - - - - - - - -
libewf - - - -
libguytools - - - - - - - - -
parted -
rtld(GNU_HASH) -
udisks -


Name Value
guymager = 0.8.1-1.fc25
guymager(x86-64) = 0.8.1-1.fc25


Type URL
Binary Package guymager-0.8.1-1.fc25.x86_64.rpm
Source Package guymager-0.8.1-1.fc25.src.rpm

Install Howto

  1. Download cert-forensics-tools-release-25 rpm:
  2. Install cert-forensics-tools-release-25 rpm:
    # rpm -Uvh cert-forensics-tools-release*rpm
  3. Install guymager rpm package:
    # dnf --enablerepo=forensics install guymager




2015-03-03 - Lawrence R. Rogers <> 0.8.1-1
* Release 0.8.1-1
* New DeviceScanMethod libudev
* Adapted to Qt 5 API
* For computers with non standard mouse: Double click open context menu
* New configuration parameter AvoidCifsProblems
* Show version number in main window title bar
* Debug CIFS flcose problem
* Added EWFX support from libewf
2015-03-03 - Lawrence R. Rogers <> 0.7.4-2
* Release 0.7.4-2
Rebuilt with libguytools-2.0.3
2014-10-30 - Lawrence R. Rogers <> 0.7.4-1
* Release 0.7.4-1
* Added output for hostname, domainname and system to info file
* New cfg param InfoFieldsForDd
* Corrected bug: DisconnectTimeout only must be active if LimitJobs is active
* libewf version check changed, all versions >= 20130416 are accepted
* New cfg parameter InfoFieldsForDd
2014-05-19 - Lawrence R. Rogers <> 0.7.3-2
* Release 0.7.3-2
Use latest version of libewf
Installed workaround where \ at the end of a line in the config file caused errors
2014-01-17 - Lawrence R. Rogers <> 0.7.3-1
* Release 0.7.3-1
2013-03-15 - Lawrence R. Rogers <> 0.7.1-1
* Release 0.7.1-1
* Duplicate image creation
* New RunStats module
* New job queue mechanism
* New userfield
* New configuration table for main Guymager table
* New font configuration
* New cfg table HiddenDevices
* New configuration parameter CommandAcquisitionEnd
* Writing hidden area info into info file
* Gray out rescan button when scan is running
* In order to avoid the "contagious error", DirectIO is switched on in fallback mode.
* Removed race condition where write thread would write hash into image before it has been calculated by hash thread.
* SHA-1 support added
2012-12-27 - Lawrence R. Rogers <> 0.6.13-1
* Release 0.6.13-1
* Package dependency to udisks added (for recent Ubuntu)
* libparted search extended to subdirs
* Added cfg parameter ForceCommandGetSerialNumber
2012-07-20 - Lawrence R. Rogers <> 0.6.12-1
* Release 0.6.12-1
* Avoiding -O3 / inline compiler bug
* Correct srceen output if no log file is in use
* DD verification: retry with NOATIME switched off if open fails
* DD verification: Do not exit if open fails
2012-07-18 - Lawrence R. Rogers <> 0.6.11-2
* Release 0.6.11-2
Built with libguytools 2.0.2
2012-07-04 - Lawrence R. Rogers <> 0.6.11-1
* Release 0.6.11-1
* Removed bug where section tables might contain only one entry.
* New cfg parameter EwfNaming supports 2 methods for naming EWF segment files
* Added warnings for low space on destination path and large number of image
files before starting acquisition, new configuration parameters 
WarnAboutImageSize and WarnAboutSegmentFileCount
* When opening destination image fails, retry with NOATIME switched off (thus
enabling cloning without root rights)
* Removed bug where section tables might contain only one entry.

See Also

Package Description
hachoir-core-1.3.4-1.fc25.noarch.rpm Library for carving binary files
hachoir-metadata-1.3.3-2.fc25.noarch.rpm Extracts metadata from multimedia files
hachoir-parser-1.3.5-1.fc25.noarch.rpm File format parser fo hachoir suite
hachoir-regex-1.0.5-1.fc25.noarch.rpm A Python library for regular expression (regex or regexp) manupulation
hachoir-subfile-0.5.3-1.fc25.noarch.rpm A tool based on hachoir-parser to find subfiles in any binary stream
hachoir-urwid-1.1-1.fc25.noarch.rpm A binary file explorer based on Hachoir library to parse the files
hachoir-wx-0.3.1-1.fc25.noarch.rpm A wxWidgets-based program that provides a user-friendly interface to hachoir-parser
ip4r-2.0.2-1.fc25.x86_64.rpm IPv4 and IPv4 range index types for PostgreSQL
jafat-1.1.6-2.fc25.x86_64.rpm JAFAT is an assortment of tools to assist in the forensic investigation of computer systems
kracked-0.1-1.fc25.x86_64.rpm kracked - create word lists from files
lame-3.99.5-6.fc25.x86_64.rpm Free MP3 audio compressor
lame-devel-3.99.5-6.fc25.x86_64.rpm Development files for lame
lame-libs-3.99.5-6.fc25.x86_64.rpm LAME MP3 encoding library
libagdb-20170710-1.x86_64.rpm Library to access the Windows SuperFetch database (AGDB) file format
libagdb-devel-20170710-1.x86_64.rpm Header files and libraries for developing applications for libagdb