In this chapter, we covered how to convert between machine- and human-readable timestamps and display that information in GUI. The primary goal of a forensic developer is to be capable of facilitating rapid design and deployment of tools that provide insight into investigations. However, in this chapter, we focused a bit more on the end user by spending a little extra time to build a nice interface for the user to operate and interact with. The code for this project can be downloaded from

In the next chapter, we will learn how to create a keylogger by calling Windows-specific APIs. While, typically, we do not develop our own "hacking" tools, it is a useful exercise in identifying how the "suspect" ...

Get Learning Python for Forensics now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.