Skip to content

Latest commit

 

History

History
30 lines (15 loc) · 1.49 KB

README.md

File metadata and controls

30 lines (15 loc) · 1.49 KB

AGP-Autopsy-Plugin

Dataset

It is inside results folder.

Installing

Open the Python module library folder using "Tools", "Python Plugins". Copy the module folder into there(which contains ForensicAF.py and SearchResults.xls) and Autopsy should identify and use it next time it loads modules.

Running the Module

Step 1: Select tools->Run Ingest Module

python plugins

Step 2: Select Artifact Genome Project

usage2

Step 3: Select whether you want to run it for file artifacts, or Registry Artifacts. And you can also select Whether you want to export files, that is the resulted files will be exported into report folder. Also you can select the number of levels you can traverse ( for ex. /path/1/2/3/4/ , you can traverse 2 levels that is options it tries /path/1/2/3/4 and 1/2/3/4 and 2/3/4)

Step 4: After running, results should be available in html format

results

results html 2

Step 5: Check inside the module folder in python plugins, for the report and results.