Python Autopsy A Quick Introduction to Scripting Autopsy Brian Carrier

Recommendations

Info

Variables and Classes • Variable: A name for some value. Think Algebra. A 2 + B 2 = C 2 A, B, and C are variables. In <strong>Python</strong>: fileName = “badfile.exe” • Class: A collection of data. • A “File” class would have data for its name, size, times etc. • You can get the data from the class: fileName = file.getName() #OSDFCon 6
Methods • Method: A set of instructions with a name def openDoor(): extend arm <strong>to</strong> doorknob grab doorknob with hand turn doorknob clockwise push door let go of doorknob • Methods can then be called in a single line: openDoor() #OSDFCon 7
Page 1 and 2: Python Autopsy: A Quick Introductio
Page 3 and 4: Why Did We Choose Python? • We we
Page 5: Background: Very High-level Program
Page 9 and 10: Writing An Autopsy Module #OSDFCon
Page 11 and 12: Step #1: Pick Your Module Type •
Page 13 and 14: Types of Ingest Modules E01 File Fi
Page 15 and 16: Summary of Python Module Options
Page 17 and 18: Step #3: Search for “TODO” Adap
Page 19 and 20: Step #4: Publish to User • You ne
Page 21 and 22: Example: Find big and round files
Page 23 and 24: Let’s Tell The World About It!
Page 25 and 26: How the User Uses It #OSDFCon 25
Page 27 and 28: Conclusion • It’s easy to get s

Python Autopsy A Quick Introduction to Scripting Autopsy Brian Carrier

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?