Tools like Autopsy can be useful for examining the contents of a disk image offline.

However, that can be cumbersome if there are a large amount of files, and you are only interested in a specific types of file.

This python script uses The Sleuth Kit to extract all PDFs and images from a disk image, and extracts the information into a SQLite database. A human-readable text report is also generated.

image_ripper.py(13.08 KB) marcbudofsky, May 14 2013, 9:26 PM

You must Sign-In to post a comment.