133794m3r / 133794m3r/itp_270_projects

Pulling It All Together

未关闭
#1 0 条评论 0 个 reaction 已指派 1 人 已被 @133794m3r 认领 在 GitHub 查看
主要语言
Python
星标
0
派生
0
PR 合并指标
30 天内没有已合并 PR

描述

This issue will track the sub issues that are required to finish this one.
The following issues will have to be closed before this one can be marked as resolved.
- [ ] 133794m3r/text_adventure#5
- [ ] 133794m3r/text_adventure#2
- [ ] 133794m3r/text_adventure#3

In the end it will parse a pcap file, extract the file types you tell it. Then it'll generate a report for you with the metadata for each file you extract.
- [ ] Local time it was extracted
- [ ] Hash of the file extracted
- [ ] Stream ID from pcap
- [ ] MAC Addresses and IP Addresses of devices that were involved
- [ ] Time the item was sent
- [ ] How the file was sent
- [ ] GPG Signature on this metadata file attesting to it's completeness by the forensics investigator.
- [ ] Folder with all files contained therein from the pcap file
- [ ] Subfolders for each file that were found based upon the sender-receiver's mac address.

Then it'll also have the following user-facing features.
- [ ] A basic menu system
- [ ] Command line options
- [ ] Allowing users to select multiple file types to be extracted
- [ ] Extract All
- [ ] Specify what GPG key will be utilized
- [ ] Searching through the data stream using a basic menu
- [ ] Visualize the data and streams
- [ ] Letting users "follow" a data stream.

贡献指南

这个仓库没有索引到贡献指南

调研方向

这是一个用于构建取证工具的大型项目的跟踪 issue。它依赖于多个子 issue。新人需要检查链接的子 issue(#5、#2、#3)以了解各个组件。工作涉及解析 pcap 文件、提取文件类型、生成包含元数据的报告,以及实现菜单系统和命令行选项。首先请查看仓库结构和现有代码,了解子 issue 已实现的内容。

由索引模型根据 Issue 内容生成。

评估

领域
cli, tooling
Issue 类型
功能
难度
5/5
预计耗时
一周以上
活跃度
停滞
描述清晰度
基本清楚
新手友好度
20/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。