[sleuthkit-developers] Few clarifications

[Wiktor S. <wik...@gm...>]

Hi Guys!

(short reminder of what am I trying to do I want to take Volatility
Framework - in Python and implement it in Autopsy)

I need few clarifications on what and how to do it:

So the way I was going to proceed with this is to:

1. write File Ingest Module that will do points: 3 to 7
2. import *.lime image of mobile phone memory/ram
3. access this image from within my module
4. access Volatility Framework from within my module (*.py files)
5. run relevant plugins in VF in the *.lime image
6. pipe output to Autopsy DB / file on disk - maybe *.txt
7. display output in Autopsy window

Any suggestions?

Regards
Vic

-----------------------------------------------
www.bluegreenblack.com
www.thisfeelsgreat.blogspot.com
http://www.vajrayanaireland.org/

For sensitive information please use encryption.

Public key available at: http://pgp.mit.edu/
Figerprint: 3D8C 48ED 42BD 4004 D23C  C455 8D80 7FB4 2C4D 7801