IPED icon indicating copy to clipboard operation
IPED copied to clipboard

Process embedded UFDR and AD1 evidences recursively

Open lfcnassif opened this issue 2 years ago • 0 comments

It's very uncommon to find those evidences embedded into others in real world cases. But I have seen investigators processing folders with a bunch of UFDR files inside. That is not the right way to process those evidences using IPED, they would be processed like ordinary zip files. But maybe we could workaround that user mistake processing embedded UFDR (and AD1) automatically for them.

lfcnassif avatar Aug 05 '22 20:08 lfcnassif