Re: [sleuthkit-users] body file + checksum - any tools

[Simson G. <si...@ac...>]

Hi, Stuart.

I recall from your presentation before that you were doing something along these lines.

You may wish to look at the DFXML toolkit, which provides a lot of this functionality.  As far as Java JNI bindings, my understanding is that these are already part of SleuthKit if you want them.

Regards,

Simson



On Mar 13, 2014, at 8:27 PM, Stuart Maclean <st...@ap...> wrote:

> By checksum do you mean the md5 hash field?  If yes, I have some Java 
> code, somewhat dormant but functional, that binds via JNI to the 
> Sleuthkit library.  And one sample program actually walks the filesystem 
> and runs md5sum over each file's main attribute.  You are welcome to 
> it.  Build instructions are a bit sketchy still, it's Maven based with a 
> bit of make to do the C parts.
> On a related note, I have some bodyfile object comparison logic that 
> might prove useful for comparing filesystems.
> 
> Stuart
> 
> ------------------------------------------------------------------------------
> Learn Graph Databases - Download FREE O'Reilly Book
> "Graph Databases" is the definitive new guide to graph databases and their
> applications. Written by three acclaimed leaders in the field,
> this first edition is now available. Download your free book today!
> http://p.sf.net/sfu/13534_NeoTech
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org