[sleuthkit-developers] New Sleuthkit python bindings
Brought to you by:
carrier
From: Michael C. <scu...@gm...> - 2010-10-24 20:16:09
|
Hi Lists, I have just uploaded a new experimental python binding for tsk3.1 in http://code.google.com/p/pytsk/ To build just unpack, adjust the location to the tsk headers in the top of setup.py (default is /usr/local/include/tsk) and then run python setup.py install There are some sample scripts there which emulate fls, ils, istat etc just to give an idea of how to use the library from a python script. The bindings have been tested on ubuntu 10.04 - they are known not to work currently under windows. If there is interest in windows support I can burn some cycles on it at a later date. Of interest is a python fuse binding which allows users to mount the filesystem onto a directory. You will see any deleted files discoverable by tsk and maybe even read them. Please test and provide feedback, Thanks Michael. |