theforensicator

School project for forensic investigations.


License
MIT
Install
pip install theforensicator==0.1.6

Documentation

TheForensicator

Release Status CI Status Documentation Status

School project for forensic investigations

Features

  • Read a EWF file
  • Extract MBR from NTFS partitions
  • Resolve paths of files from NTFS partitions
  • Extract files from NTFS partitions
  • Extract list of files from NFTS partitons using yaml file as a list

Credits

This package was created with the ppw tool. For more information, please visit the project page.