Python Autopsy A Quick Introduction to Scripting Autopsy Brian Carrier

Recommendations

Info

Step #2: Find Something to Borrow • Find the closest tutorial: • File Ingest Module: Flag files based on size. • Data Source Ingest Modules: • Find SQLite databases and parse them. • Run a command line tool on a disk image. • Report Module: Create CSV report. • Review code in the templates on github: https://github.com/sleuthkit/autopsy/tree/develop/pythonExamples #OSDFCon 16
Step #3: Search for “TODO” Adapt the templates to you # TODO: give it a unique name. Will be shown in module list moduleName = "Sample File Ingest Module” #OSDFCon 17
Page 1 and 2: Python Autopsy: A Quick Introductio
Page 3 and 4: Why Did We Choose Python? • We we
Page 5 and 6: Background: Very High-level Program
Page 7 and 8: Methods • Method: A set of instru
Page 9 and 10: Writing An Autopsy Module #OSDFCon
Page 11 and 12: Step #1: Pick Your Module Type •
Page 13 and 14: Types of Ingest Modules E01 File Fi
Page 15: Summary of Python Module Options
Page 19 and 20: Step #4: Publish to User • You ne
Page 21 and 22: Example: Find big and round files
Page 23 and 24: Let’s Tell The World About It!
Page 25 and 26: How the User Uses It #OSDFCon 25
Page 27 and 28: Conclusion • It’s easy to get s

Python Autopsy A Quick Introduction to Scripting Autopsy Brian Carrier

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?