IPED
IPED copied to clipboard
IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by p...
@patrickdalla just reported a "Too few available memory per processing thread" warning while generating a report. The issue was: `numThreads` was fixed as 40 in processing machine, but the analysis...
See https://github.com/sepinf-inc/IPED/pull/781#issuecomment-953019636
Some parsers need external tools to execute properly, and those dependencies have to be installed manually on linux. By doing so in the java CI, these parsers can be tested...
When docx, xlsx, pptx, odt, ods, odp... fail to be parsed, RawStringsParser is used as fallback today, but it doesn't decode compressed data. Generally the original parser is able to...
A lot of third parties have developed user interfaces to configure and start processing. We have heard about 7 of them, at least. So this is a needed feature, very...
Current RawStringsParser, used to extract strings from unallocated, unknown, corrupted or not supported files, extracts Latin1 scripts encoded with windows-1252, UTF-8 or UTF-16, even mixed in the same file. That...
Currently both reports are created simultaneously. Eventually the user may want just one of them. Sometimes users do not have enough memory to create a portable indexed case report while...
It could be useful to group items by parent folder in the metadata filter tab.
This could be very useful for CSAM and other cases. Other approach would be to always set the thumb in the instant message item (this is commented out in code)...
Carving is scanning sqlite files since a long ago, I think this was a misconfiguration, this usually results in blobs being extracted twice (from carving and from default sqlite expansion)....