Python Autopsy A Quick Introduction to Scripting Autopsy Brian Carrier

Recommendations

Info

Seeing The Results Artifacts Reports #OSDFCon 20
Example: Find big and round files • July ‘15 Tu<strong>to</strong>rial on www.basistech.com • Big and round files: • Bigger than 10MB and multiple of 4096 bytes • Could be encrypted volumes • Step #1: Pick the type • We want <strong>to</strong> look at all files, even ZIP file contents. • File Ingest Module. • Steps #2 and #3: Copy the file ingest template and update its name, etc. #OSDFCon 21
Page 1 and 2: Python Autopsy: A Quick Introductio
Page 3 and 4: Why Did We Choose Python? • We we
Page 5 and 6: Background: Very High-level Program
Page 7 and 8: Methods • Method: A set of instru
Page 9 and 10: Writing An Autopsy Module #OSDFCon
Page 11 and 12: Step #1: Pick Your Module Type •
Page 13 and 14: Types of Ingest Modules E01 File Fi
Page 15 and 16: Summary of Python Module Options
Page 17 and 18: Step #3: Search for “TODO” Adap
Page 19: Step #4: Publish to User • You ne
Page 23 and 24: Let’s Tell The World About It!
Page 25 and 26: How the User Uses It #OSDFCon 25
Page 27 and 28: Conclusion • It’s easy to get s

Python Autopsy A Quick Introduction to Scripting Autopsy Brian Carrier

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?