Skip to main content

DS4N6 stands for Data Science Forensics.

We also refer to this project as DSDFIR, AI4N6 or AIDFIR, since Data Science (DS) includes Artificial Intelligence (AI), and the project goes beyond the strictly Forensics, covering the whole Digital Forensics & Incident Response (DFIR) discipline (and sometimes even beyond). But hey, we had to give the project a catchy name!

The Mission of the DS4N6 project is simple:

Bringing Data Science & Artificial Intelligence
to the fingertips of the average Forensicator,
and promote advances in the field

The first (modest) alpha version of our ds4n6 python library, together with some easy-to-use python scripts, was originally made public after the presentation at the SANS DFIR Summit US, July 16-17. For detailed information about the Project, the Library, its Functions, its Usage, etc., visit the project page: http://www.ds4n6.io/tools/chrysalis.html

Getting Started

These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system.

https://github.com/ds4n6/ds4n6_chrysalis.git

Prerequisites

The DS4N6 library works on the 3.x versions of the Python programming language. The module has external dependencies related to datascience and extraction of forensic evidence.

Install requirements:

- python-evtx
- Evtx
- ipyaggrid
- IPython
- ipywidgets
- keras
- matplotlib
- nbformat
- numpy
- pandas
- pyparsing
- qgrid
- ruamel.yaml
- sklearn
- tensorflow
- tqdm
- traitlets
- xmltodict

Installation

The installation can be easily done through pip.

pip installation

    pip install python-evtx Evtx ipyaggrid IPython ipywidgets keras matplotlib nbformat numpy pandas pyparsing qgrid ruamel.yaml sklearn tensorflow tqdm traitlets xmltodict ds4n6-lib

Finally, import in your python3 program or Jupyter Notebook as "ds".

    import ds4n6_chrysalis as ds

Contributing

If you think you can provide value to the Community, collaborating with Research, Blog Posts, Cheatsheets, Code, etc., contact us!

Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.

download from github

All you will need to do is to clone the library, install the test, create a virtual enviroment to use it and active it.

    
    git clone https://github.com/ds4n6/ds4n6_chrysalis    

    virtualenv -p python3.7 .test
    source .test/bin/activate
    
    pip install -r requirements.txt 

Authors

See also the list of contributors who participated in this project.

License

This project is licensed under the GNU GPL v3.0 License - see the LICENSE file for details

Metadata

Release files for ds4n6-chrysalis 0.7.2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for ds4n6-chrysalis 0.7.2
File Size Uploaded Provenance Actions
ds4n6_chrysalis-0.7.2.tar.gz 120.6 kB Without provenance Details for ds4n6_chrysalis-0.7.2.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for ds4n6-chrysalis 0.7.2
File Interpreter ABI Platform Actions
ds4n6_chrysalis-0.7.2-py3-none-any.whl Python 3 none any Details for ds4n6_chrysalis-0.7.2-py3-none-any.whl

Total release size: 260.8 kB

Release files / ds4n6_chrysalis-0.7.2.tar.gz

Download URL ds4n6_chrysalis-0.7.2.tar.gz
Size 120.6 kB
Tags Source
SHA-256 checksum
How to use checksums
a90db87371ae43a742a9b4969e18647ab56aaf0269b3fc749a5d0ad66e5766ee
BLAKE2b-256 checksum
How to use checksums
95eadeadaf4df9fdf891af349c1ccb5a31f23e3d598ca458778130e8d64eb293
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/4.0.1 CPython/3.8.10

Release files / ds4n6_chrysalis-0.7.2-py3-none-any.whl

Download URL ds4n6_chrysalis-0.7.2-py3-none-any.whl
Size 140.2 kB
Tags Python 3
SHA-256 checksum
How to use checksums
5498e1dc7df09c969f46942f8476765941d1d5024ae6ee0fef1a11c7c3ece925
BLAKE2b-256 checksum
How to use checksums
3e25aa411acf5a66db2e6141e6aacd118fec61d984ece25dbc20551a455209f9
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/4.0.1 CPython/3.8.10

Security for ds4n6-chrysalis 0.7.2

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.7.2 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page