Description
Automatically creates mmls, fsstat and fls results for image files
Installation
# Sleuthkit needs to be installed
# and available in PATH
sudo apt install sleuthkit
pip install autotsk
Usage
From command line:
python -m autotsk --path PATH [--result RESULT]
| Option | Short | Type | Default | Description |
|---|---|---|---|---|
| --path | -p | String | - | Path to img/dd file |
| --result | -r | String | ./autotsk-result | Path to result dir |
Example
python -m autotsk -p example.dd
################################################################################
autotsk by 5f0
Automatically creates mmls, fsstat and fls results for image files
Current working directory: /path/to/autotsk
Datetime: 01/01/1970 10:11:12
################################################################################
mmls Output
----------
DOS Partition Table
Offset Sector: 0
Units are in 512-byte sectors
Slot Start End Length Description
000: Meta 0000000000 0000000000 0000000001 Primary Table (#0)
001: ------- 0000000000 0000008191 0000008192 Unallocated
002: 000:000 0000008192 0000110591 0000102400 Win95 FAT32 (0x0b)
003: ------- 0000110592 0000212991 0000102400 Unallocated
004: 000:001 0000212992 0000458751 0000245760 NTFS / exFAT (0x07)
005: ------- 0000458752 0000466943 0000008192 Unallocated
006: 000:002 0000466944 0000569343 0000102400 Linux (0x83)
007: ------- 0000569344 0000577535 0000008192 Unallocated
008: 000:003 0000577536 0000782335 0000204800 Linux (0x83)
009: ------- 0000782336 0003911679 0003129344 Unallocated
Extracting Offsets
----------
Offset found: 8192
Offset found: 212992
Offset found: 466944
Offset found: 577536
Applying TSK Commands
----------
fsstat and fls for offset: 8192
fsstat and fls for offset: 212992
fsstat and fls for offset: 466944
fsstat and fls for offset: 577536
Result Location
----------
Path: ./autotsk-result
################################################################################
Execution Time: 0.075163 sec
Created files in result directory:
autotsk-result/
├── 0-8192-fls.txt
├── 0-8192-fsstat.txt
├── 1-212992-fls.txt
├── 1-212992-fsstat.txt
├── 2-466944-fls.txt
├── 2-466944-fsstat.txt
├── 3-577536-fls.txt
├── 3-577536-fsstat.txt
└── mmls.txt
License
MIT
1 maintainer
Metadata
1 maintainer
Release files for autotsk 1.0.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| autotsk-1.0.1.tar.gz | 4.2 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| autotsk-1.0.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 9.0 kB
Release files / autotsk-1.0.1.tar.gz
| Download URL | autotsk-1.0.1.tar.gz |
|---|---|
| Size | 4.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
1d4a2dde85456433634fe87bf5b0f326ec23d615a34ef5e8ec4dee05ef32bca3
|
|
BLAKE2b-256 checksum How to use checksums |
a77350d37d4be7e553c7426cd62b6ad785b6bef34fac4fc97fbdd6e360e59a82
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.1 CPython/3.10.8
|
Release files / autotsk-1.0.1-py3-none-any.whl
| Download URL | autotsk-1.0.1-py3-none-any.whl |
|---|---|
| Size | 4.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
08a648773e2daa96cea1263d27bd3691387eee9fe7822c865164160dcf264314
|
|
BLAKE2b-256 checksum How to use checksums |
8318f4e3fb2093cfbeb3a7facc4c8c94f4a3f59ab76c83ef076eec45bf873bfa
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.1 CPython/3.10.8
|
Security for autotsk 1.0.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
