Python Autopsy A Quick Introduction to Scripting Autopsy Brian Carrier

Recommendations

Info

4 Basic Steps 1. Pick your module type. 2. Find the closest Autopsy template or tutorial to copy. 3. Search for the word “TODO” and put in your own names, etc. 4. Write your analytics in the “analysis method”. #OSDFCon 10
Step #1: Pick Your Module Type • There are 8 module types in Autopsy. • Only 3 of which can be written in Python though. #OSDFCon 11
Page 1 and 2: Python Autopsy: A Quick Introductio
Page 3 and 4: Why Did We Choose Python? • We we
Page 5 and 6: Background: Very High-level Program
Page 7 and 8: Methods • Method: A set of instru
Page 9: Writing An Autopsy Module #OSDFCon
Page 13 and 14: Types of Ingest Modules E01 File Fi
Page 15 and 16: Summary of Python Module Options
Page 17 and 18: Step #3: Search for “TODO” Adap
Page 19 and 20: Step #4: Publish to User • You ne
Page 21 and 22: Example: Find big and round files
Page 23 and 24: Let’s Tell The World About It!
Page 25 and 26: How the User Uses It #OSDFCon 25
Page 27 and 28: Conclusion • It’s easy to get s

Python Autopsy A Quick Introduction to Scripting Autopsy Brian Carrier

Create successful ePaper yourself

Delete template?

Save as template?