Down to the smallest sector detail!
Project description
getblocks
NORMALIZATION
Clean data is mission-critical for collecting operating system artifacts, especially with user home directories.
APPLE, LINUX, & UNIX
if path[:1] == '/':
out = path.split('/')
try:
if out[1] == 'home':
out[2] = 'user'
path = '/'.join(out)
elif out[1] == 'Users':
if out[2] != 'Shared':
out[2] = 'user'
path = '/'.join(out)
except:
pass
MICROSOFT WINDOWS
elif path[1] == ':':
out = path.split('\\')
try:
if out[1] == 'Users' or out[1] == 'Documents and Settings':
if out[2] != 'Default' and out[2] != 'Public' and out[2] != 'All Users' and out[2] != 'Default User':
out[0] = 'C:'
out[2] = 'Administrator'
path = '\\'.join(out)
except:
pass
CAPTURED DATA
- ami
- path
- file
- size
- md5
- sha256
- b3
- md5path
- sha256path
- b3path
- md5dir
- sha256dir
- b3dir
- md5name
- sha256name
- b3name
- type
- entropy
- block
- location
REQUIREMENTS
curl https://sh.rustup.rs -sSf | sh -s -- -y
source "$HOME/.cargo/env"
INSTALLATION
pip install getblocks
DEVELOPMENT
python setup.py install --user
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
getblocks-2023.11.11.tar.gz
(8.2 kB
view hashes)
Built Distribution
Close
Hashes for getblocks-2023.11.11-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 56e52b6a1c8189c9fda14dd0248bcf10a8be0ec809eb3ea3054e8d88a4bf373c |
|
MD5 | 5c1fa66813ced90332b889b7f0429491 |
|
BLAKE2b-256 | f8e13c5fa3d37159ad077e06a8a9db38f36fc75b8ad17a82bde9d73a13380450 |