Difference between revisions of "PyFlag"
From Forensics Wiki
Uwe Hermann (Talk | contribs) m |
Uwe Hermann (Talk | contribs) (Rewritten description (the previous was cut'n'pasted from the website). Added history.) |
||
| Line 1: | Line 1: | ||
| − | + | '''PyFlag''' is a web-based, database-backed ''forensic and log analysis GUI'' written in [[Python]]. | |
| − | + | ||
| − | + | ||
| − | + | ||
=Features= | =Features= | ||
==File Systems Understood== | ==File Systems Understood== | ||
| − | |||
| − | |||
==File Search Facilities== | ==File Search Facilities== | ||
| Line 20: | Line 15: | ||
Can it build timelines and search by creation date? | Can it build timelines and search by creation date? | ||
| + | * Creates a "case file". | ||
==Searching Abilities== | ==Searching Abilities== | ||
| Line 28: | Line 24: | ||
==Hash Databases== | ==Hash Databases== | ||
| − | * Hashes and compares with Hashkeeper using MD5. | + | * Hashes and compares with [[Hashkeeper]] using [[MD5]]. |
==Evidence Collection Features== | ==Evidence Collection Features== | ||
| − | |||
=History= | =History= | ||
| − | * | + | * Originally started by the [[Australian Department of Defence]], PyFlag is now hosted on [[SourceForge]]. |
==License Notes== | ==License Notes== | ||
| − | GNU GPL. | + | * GNU GPL. |
= External Links = | = External Links = | ||
| − | * [http://pyflag.sourceforge.net/ | + | * [http://pyflag.sourceforge.net/ Official website] |
==External Reviews== | ==External Reviews== | ||
Revision as of 15:48, 21 March 2006
PyFlag is a web-based, database-backed forensic and log analysis GUI written in Python.
Contents |
Features
File Systems Understood
File Search Facilities
- Lists allocated and unallocated files.
- Sorts files by type.
- Searches for keywords.
- Works with compressed zip files.
Historical Reconstruction
Can it build timelines and search by creation date?
- Creates a "case file".
Searching Abilities
- Searches for keywords.
- Builds an index.
Hash Databases
- Hashes and compares with Hashkeeper using MD5.
Evidence Collection Features
History
- Originally started by the Australian Department of Defence, PyFlag is now hosted on SourceForge.
License Notes
- GNU GPL.
