autopsy
autopsy copied to clipboard
make thumbs.db parser
Make a thumbs.db /thumbcache parser as part of an ingest module that detects the files and creates derived files that contain the thumbnails. These thumbnails should then be processed by the ingest pipelines.
Try the python plugin at https://drive.google.com/file/d/0Bxdmy6yl9bUqQkV6WmpaMXI3anc/view?usp=sharing and see if that is what you are looking for. If you have any questions or comments let me know.
Mark
Is there a way Mark's existing work could be integrated in?
https://github.com/markmckinnon/Autopsy-Plugins/tree/master/Thumbs_parser https://github.com/markmckinnon/Autopsy-Plugins/tree/master/Thumbcache_parser