September 2016
Intermediate to advanced
216 pages
4h 26m
English
This chapter walks through the process and associated Python scripts necessary to interface with AccessData’s Mobile Phone Examiner Plus (MPE +). The scripts provided will demonstrate the direct interface with the embedded Python scripter capability of MPE + and provide a template Python script. In addition, a Python script to perform a hash search of files contained with and MPE + image is provided along with the multiple output methods.
Python; Forensics; Python Standard Library; hashlib; Time; os; sys; argv; Python forensic template; Logging; UTC; Dictionary; List; Key; Value; MPE +; AccessData; LogEvent; CSV write; PF_MPE_PARAMETERS.py; PF_MPE_BASIC.py; PF_HashSearch.py; CSV