[sleuthkit-users] sleuthkit framework and scalpel

[Sanchez, R. <rr...@ra...>]

I have a question about scalpel and integration with the sleuthkit framework. I was able to get scalpel and sleuthkit built and I used the sample framework and pipeline XML files to carve and do some file analysis on a test image. However, I notice that carved files aren't being processing in the file analysis phase. E.g., the carved files don't get hashed. At least they don't appear in the file_hashes table in the output database. So my question is: do I need to do something special to make sure the carved files get added to the scheduler for processing.

I'm just getting started with sleuthkit, so I apologize if this is a simple question.

Thank you,

-ricky


Ricardo Sanchez, RAND Corporation
Research Software Engineer, Information Services
n1428b   (504) 299-3448   rr...@ra...<mailto:rr...@ra...>


__________________________________________________________________________

This email message is for the sole use of the intended recipient(s) and
may contain confidential information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply email and destroy all copies
of the original message.