autopsy icon indicating copy to clipboard operation
autopsy copied to clipboard

make thumbs.db parser

Open bcarrier opened this issue 8 years ago • 2 comments

Make a thumbs.db /thumbcache parser as part of an ingest module that detects the files and creates derived files that contain the thumbnails. These thumbnails should then be processed by the ingest pipelines.

bcarrier avatar Jun 09 '16 17:06 bcarrier

Try the python plugin at https://drive.google.com/file/d/0Bxdmy6yl9bUqQkV6WmpaMXI3anc/view?usp=sharing and see if that is what you are looking for. If you have any questions or comments let me know.

Mark

markmckinnon avatar Jul 26 '17 00:07 markmckinnon

Is there a way Mark's existing work could be integrated in?

https://github.com/markmckinnon/Autopsy-Plugins/tree/master/Thumbs_parser https://github.com/markmckinnon/Autopsy-Plugins/tree/master/Thumbcache_parser

moshekaplan avatar Oct 13 '21 18:10 moshekaplan