Tools like Autopsy can be useful for examining the contents of a disk image offline.
However, that can be cumbersome if there are a large amount of files, and you are only interested in a specific types of file.
This python script uses The Sleuth Kit to extract all PDFs and images from a disk image, and extracts the information into a SQLite database. A human-readable text report is also generated.
|image_ripper.py(13.08 KB)||marcbudofsky, May 14 2013, 9:26 PM|
You must Sign-In to post a comment.