Clean data is mission-critical for collecting operating system artifacts, especially with user home directories.
if path[:1] == '/':
out = path.split('/')
try:
if out[1] == 'home':
out[2] = 'user'
path = '/'.join(out)
elif out[1] == 'Users':
if out[2] != 'Shared':
out[2] = 'user'
path = '/'.join(out)
except:
pass
elif path[1] == ':':
out = path.split('\\')
try:
if out[1] == 'Users' or out[1] == 'Documents and Settings':
if out[2] != 'Default' and out[2] != 'Public' and out[2] != 'All Users' and out[2] != 'Default User':
out[0] = 'C:'
out[2] = 'Administrator'
path = '\\'.join(out)
except:
pass
- ami
- path
- file
- size
- md5
- sha256
- b3
- md5path
- sha256path
- b3path
- md5dir
- sha256dir
- b3dir
- md5name
- sha256name
- b3name
- type
- entropy
- block
- location
curl https://sh.rustup.rs -sSf | sh -s -- -y
source "$HOME/.cargo/env"
pip install getblocks
python setup.py install --user