Skip to main content

DS4N6 stands for Data Science Forensics.

We also refer to this project as DSDFIR, AI4N6 or AIDFIR, since Data Science (DS) includes Artificial Intelligence (AI), and the project goes beyond the strictly Forensics, covering the whole Digital Forensics & Incident Response (DFIR) discipline (and sometimes even beyond). But hey, we had to give the project a catchy name!

The Mission of the DS4N6 project is simple:

Bringing Data Science & Artificial Intelligence
to the fingertips of the average Forensicator,
and promote advances in the field

The first (modest) alpha version of our ds4n6 python library, together with some easy-to-use python scripts, was originally made public after the presentation at the SANS DFIR Summit US, July 16-17. For detailed information about the Project, the Library, its Functions, its Usage, etc., visit the project page: http://www.ds4n6.io/tools/ds4n6.py.html

Getting Started

These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system.

https://github.com/ds4n6/ds4n6_lib.git

Prerequisites

The DS4N6 library works on the 3.x versions of the Python programming language. The module has external dependencies related to datascience and extraction of forensic evidence.

Install requirements:

- python-evtx
- Evtx
- ipyaggrid
- IPython
- ipywidgets
- keras
- matplotlib
- nbformat
- numpy
- pandas
- pyparsing
- qgrid
- ruamel.yaml
- sklearn
- tensorflow
- tqdm
- traitlets
- xmltodict
- networkx
- gensim

Installation

The installation can be easily done through pip.

pip installation

    pip install -r requirements.txt

Finally, import in your python3 program or Jupyter Notebook as "ds".

    import ds4n6_lib as ds

Contributing

If you think you can provide value to the Community, collaborating with Research, Blog Posts, Cheatsheets, Code, etc., contact us!

Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.

download from github

All you will need to do is to clone the library, install the test, create a virtual enviroment to use it and active it.

    
    git clone https://github.com/ds4n6/ds4n6_lib    

    virtualenv -p python3.10 .test
    source .test/bin/activate
    
    pip install -r requirements.txt 

Authors

See also the list of contributors who participated in this project.

License

This project is licensed under the GNU GPL v3.0 License - see the LICENSE file for details

Metadata

Release files for ds4n6-lib 0.8.3

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for ds4n6-lib 0.8.3
File Size Uploaded Provenance Actions
ds4n6_lib-0.8.3.tar.gz 142.4 kB Without provenance Details for ds4n6_lib-0.8.3.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for ds4n6-lib 0.8.3
File Interpreter ABI Platform Actions
ds4n6_lib-0.8.3-py3-none-any.whl Python 3 none any Details for ds4n6_lib-0.8.3-py3-none-any.whl

Total release size: 307.4 kB

Release files / ds4n6_lib-0.8.3.tar.gz

Download URL ds4n6_lib-0.8.3.tar.gz
Size 142.4 kB
Tags Source
SHA-256 checksum
How to use checksums
73028e2ed129068e762f24d823f3d6cb1b03dc993e097523d0f1a04d1ef05f4a
BLAKE2b-256 checksum
How to use checksums
f5fbaef5033c7f334c0abe145b44ca5a7326ceaf10ccd17dd7928c711a106c03
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/4.0.2 CPython/3.10.12

Release files / ds4n6_lib-0.8.3-py3-none-any.whl

Download URL ds4n6_lib-0.8.3-py3-none-any.whl
Size 165.0 kB
Tags Python 3
SHA-256 checksum
How to use checksums
76f1559bb04ab4b50baebbe9a95f9cc8f7cbefbb8881f2f0ce05ae1c8038fbfa
BLAKE2b-256 checksum
How to use checksums
076a18cb0f1b6b0b502cbbe706cfdf32c3c6b0878ec467be2ae9ffbfc90fbf9e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/4.0.2 CPython/3.10.12

Security for ds4n6-lib 0.8.3

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page