Talk With an Expert

Grow Your Own Forensic Tools: A Taxonomy of Python Libraries Helpful for Forensic Analysis

Grow Your Own Forensic Tools: A Taxonomy of Python Libraries Helpful for Forensic Analysis (PDF, 3.57MB)Published: 13 Sep, 2010
Created by
T.J. OConnor

Python, a high-level language, provides an outstanding interface for forensicanalysts to write scripts to examine evidence. Python is the driving language for several current open-source forensic analysis projects from Volatility, for memory analysis to libPST for abstracting the process of examining email. This paper provides a taxonomy of the different forensics libraries and examples of code that a forensic analyst can quickly generate using Python to further examine evidence.