September 2016
Intermediate to advanced
216 pages
4h 26m
English
This chapter focuses on the integration of Python using the postprocessing approach. The integration is applied to WetStone’s US-LATT (USB-Live Acquisition and Triage Tool).
WetStone; US-LATT; NIJ; memScanner.py; pfDiscover.py; Memory snapshot; Class; Object; Python dictionaries; Iteration; Regular expressions; argparse; Zeroization; Secure; USB; Secure partition; CSV; Email; Credit card; Social security number; URL; Strong password; Zip code; Phone number
We examined the integration of Python with MPE + and EnCase in Chapters 3 and 4. In both of these cases, the integration was accomplished by launching Python scripts from within the forensic platform. ...