brunnhilde
brunnhilde copied to clipboard
tw4l
Siegfried-based characterization tool for directories and disk images
Solution for CCA Disk Image Processor mounts disk image, copies files using shutil.copytree, and then unmounts image in Bitcurator. Difficulty is in making such an approach work across different OSes.
Connected to https://github.com/tw4l/brunnhilde/issues/53 Brunnhilde/Siegfried report on the file created and modified dates as they are in the file system where files are being scanned. Sometimes files contain more accurate timestamps...
Extract metadata from files, using [Apache Tika](https://tika.apache.org), [exiftool](https://exiftool.org/) or native Python libraries. Questions: * Tool(s) used to extract metadata: Apache Tika](https://tika.apache.org), [exiftool](https://exiftool.org/), [Hachoir](https://hachoir.readthedocs.io/en/latest/), ... * Which schemas/formats: EXIF, XMP... *...
Hello, I'm encountering a somewhat frequent issue when attempting to run brunnhilde on disk images, where Brunhilde/tsk_recover are unable to carve files from disk images. I've confirmed that these are...
Hi, I've encountered some Bundles: https://en.wikipedia.org/wiki/Bundle_(macOS), particularly https://en.wikipedia.org/wiki/Rich_Text_Format_Directory and I was wondering if Brunnhilde could report on their existence? Attached is a zip that contains an RTFD. On Windows it...
Hi all- Just wondering if it is possible to use some of the more advanced options of bulk_extractor when running Brunnhilde? (such as enabling/disabling scanners, including custom ones, using stop...
