Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Learning Hub

Free Learning

You're reading from Learning Python for Forensics Leverage the power of Python in forensic investigations

Product type Paperback

Published in Jan 2019

Publisher Packt

ISBN-13 9781789341690

Length 476 pages

Edition 2nd Edition

Languages

Python

Concepts

Forensics

Authors (2):

Preston Miller

Chapin Bryce

View More author details

Table of Contents (15) Chapters

Preface

1. Now for Something Completely Different

2. Python Fundamentals FREE CHAPTER

3. Parsing Text Files

4. Working with Serialized Data Structures

5. Databases in Python

6. Extracting Artifacts from Binary Files

7. Fuzzy Hashing

8. The Media Age

9. Uncovering Time

10. Rapidly Triaging Systems

11. Parsing Outlook PST Containers

12. Recovering Transient Database Records

13. Coming Full Circle

14. Other Books You May Enjoy

Leave a review - let other readers know what you think

An introduction to libpff

The libpff library allows us to reference and navigate through PST objects in a programmatic manner. The root_folder() function allows us to reference RootFolder, which is the base of the PST file and the starting point for our recursive analysis of email content. Within RootFolder are folders and messages. The folders can contain other sub-folders or messages. Folders have properties that include the name of the folder, the number of subfolders, and the number of submessages. Messages are objects representing messages and have attributes, including the subject line, the name of all participants, and several timestamps.

How to install libpff and pypff

Installing some third-party libraries is more...

The rest of the chapter is locked

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (2)

Miller

Preston Miller is a consultant at an internationally recognized risk management firm. Preston holds an undergraduate degree from Vassar College and a master's degree in digital forensics from Marshall University. While at Marshall, Preston unanimously received the prestigious J. Edgar Hoover Foundation's scientific scholarship. Preston is a published author, recently of Python Digital Forensics Cookbook, which won the Forensic 4:cast Digital Forensics Book of the Year award in 2018. Preston is a member of the GIAC advisory board and holds multiple industry-recognized certifications in his field.

See other products by Miller

Chapin Bryce

Chapin Bryce is a senior consultant at a global firm that is a leader in digital forensics and incident response investigations. After graduating from Champlain College, with a bachelor's degree in computer and digital forensics, Chapin dove into the field of digital forensics and incident response joining the GIAC advisory board and earning four GIAC certifications: GCIH, GCFE, GCFA, and GNFA. As a member of multiple ongoing research and development projects, he has authored several books and articles in professional and academic publications, including Python Digital Forensics Cookbook (2018 Digital Forensics Book of the Year, Forensic 4Cast), Learning Python for Forensics First Edition, and Digital Forensic Magazine.

See other products by Chapin Bryce