Tags: Lyro1/image_analysis
Tags
20181011 Release This release contains the following elements: - install_plaso.sh: install plaso and its dependencies on a Debian 9 system - analyse_image.sh: uses plaso to get a list of files and process running on a system image - match_hash.sh: generates a file containing the hashes of unknown files and processes from a hash file or a directory, based on the NSRL database This release has been developped and test on a Debian 9 distribution. Wiki is up-to-date with this release.