Learning Python for Forensics

Framework summary

Frameworks are incredibly useful to organize multiple collections of script under one "roof," so to speak. There are challenges that come with frameworks; mainly keeping standardized operations through the growth of the project. Our metadata_parser.py framework is in its first iteration and, if we continue to develop it, we may find that the current setup is only suitable on a smaller level.

For example, as we implement more and more features, we might realize that the efficiency of our framework starts to lag. At that point, we would need to go back to the drawing board and determine if we're using the correct data type or the best way to write our plugins and writers.