IPED

IPED copied to clipboard

Export files to a more forensic sound format in triage mode

6

As explained on https://github.com/sepinf-inc/IPED/issues/1714#issuecomment-1591259306 ZIP is not the best format to collect files in triage situations. One option is exporting to AD1, since it was reverse engineered by @gfd2020 and...

lfcnassif

Last Lucene version is 9.7. We can use 9.6 to be last OpenSearch compatible unless they upgrade soon.

lfcnassif

Support ZIP files as datasource?

2

Currently if a ZIP file is passed through -d parameter, it is processed as a container and all its contents are copied to the case folder, kind duplicating the used...

lfcnassif

Sleuthkit-4.11 exposed that information almost 2 years ago to Java API: https://sleuthkit.org/sleuthkit/docs/jni-docs/4.12.0/classorg_1_1sleuthkit_1_1datamodel_1_1_abstract_file.html#a7d2c04637ca9ae1fdbe477656fd5d726 Having the owner SID, it should be easy to get other owner info from sleuthkitCase.getOsAccountManager(), like login and...

lfcnassif

Extract timestamp metadata from external parsers output

19

ExternalParsers.xml could be updated with regex rules to extract metadata from output of: 1. RecyclerBinParser 2. RecycleInfo2Parser 2. PrefetchParser 3. EvtxLogParser 4. EvtLogParser 5. SuperFetchParser

lfcnassif

Extracts timestamps from external parsers outputs based on regex expressions.

patrickdalla

Optimize memory usage of WhatsApp merge backups feature

12

This out of memory occurs when parsing the msgstore databases. There are several huge msgstore, with approximately 2 GB each. The problem did not occur when I disable the \false\....

hauck-jvsh

AIOOBE in ScriptTask

9

I'm using IPED 4.2-snapshot (commit 1e04e83bb) The console logged these lines: ``` java.lang.Exception: Worker-3 Error while processing /item03_XXXX-PC_C_Drive001-antigo_vdi.E01/Users/XXXXXX/AppData/Local/Google/Chrome/User Data/System Profile/History (118784bytes) at iped.engine.core.Worker.process(Worker.java:186) ~[iped-engine-4.2-snapshot.jar:?] at iped.engine.core.Worker.run(Worker.java:265) ~[iped-engine-4.2-snapshot.jar:?] Caused by: java.lang.ArrayIndexOutOfBoundsException:...

aberenguel

#1823 whisper transcription

37

When finished this will close #1823. Already tested on CPU. I still need to test on GPU, test the remote service and verify Wav2Vec2 backwards compatibility.

lfcnassif

Individual filterer disable/reenable in filters panel.

42

This will close #39 again when finished. There are more fixes to come, so this is just a draft.

lfcnassif