Re: [sleuthkit-developers] Android forensics - Autopsy module
Brought to you by:
carrier
From: Wiktor S. <wik...@gm...> - 2016-06-14 11:34:36
|
Roberto I did something similar for my final year project. I can share my paper with you? Also, search mailing group for my email. I used external python framework. Vic On 13 Jun 2016 16:36, "Roberto Amelio" <g.r...@gm...> wrote: > Ok, I think I got stuff to start with! thank you both so much. > > Roberto > > On Mon, 13 Jun 2016 at 15:43 Brian Carrier <ca...@sl...> wrote: > >> Adding to Justin’s comment, you can start with the Python tutorial that I >> did last year, which focuses on a smart phone-like use case that looks for >> a SQLite database and parses the contents. >> >> >> http://www.autopsy.com/python-autopsy-module-tutorial-2-the-data-source-ingest-module/ >> >> >> > On Jun 12, 2016, at 12:18 PM, Justin Grover <jus...@gm...> >> wrote: >> > >> > Hi Roberto, >> > >> > Good luck on your project! Assuming I'm understanding your task >> correctly, you are first going to need to target/look at a specific app or >> file of interest on Android that contains geodata. After you've figured out >> the specifics of where/how the data is stored, you will probably want to >> create a data source ingest module in Autopsy to extract/display your >> findings. >> > >> > Justin >> > >> > On Jun 11, 2016 2:18 PM, "Roberto Amelio" <g.r...@gm...> wrote: >> > Hi, >> > >> > My name is Roberto and I'm doing a MSc in Cyber Security. I would like >> to develop a module for Autopsy as my final project. It has to be focused >> on mobile (Android) forensics, I am reading the documentation online >> getting an idea about ingest modules and what the Android Analyser Module >> already does. >> > >> > My idea is to retrieve as much information on locations as possible to >> be able to track where the phone has been, providing an XML file (or >> something like that) to plot. >> > >> > I would appreciate feedback about it and help to start. I hope my >> question is appropriate for this mailing list, I am not used to use it. >> > >> > Regards, >> > >> > Roberto >> > >> > >> > >> ------------------------------------------------------------------------------ >> > What NetFlow Analyzer can do for you? Monitors network bandwidth and >> traffic >> > patterns at an interface-level. Reveals which users, apps, and >> protocols are >> > consuming the most bandwidth. Provides multi-vendor support for NetFlow, >> > J-Flow, sFlow and other flows. Make informed decisions using capacity >> > planning reports. >> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e >> > _______________________________________________ >> > sleuthkit-developers mailing list >> > sle...@li... >> > https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers >> > >> > >> ------------------------------------------------------------------------------ >> > What NetFlow Analyzer can do for you? Monitors network bandwidth and >> traffic >> > patterns at an interface-level. Reveals which users, apps, and >> protocols are >> > consuming the most bandwidth. Provides multi-vendor support for NetFlow, >> > J-Flow, sFlow and other flows. Make informed decisions using capacity >> > planning reports. >> https://ad.doubleclick.net/ddm/clk/305295220;132659582;e_______________________________________________ >> > sleuthkit-developers mailing list >> > sle...@li... >> > https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers >> >> > > ------------------------------------------------------------------------------ > What NetFlow Analyzer can do for you? Monitors network bandwidth and > traffic > patterns at an interface-level. Reveals which users, apps, and protocols > are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e > _______________________________________________ > sleuthkit-developers mailing list > sle...@li... > https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers > > |