Tiger Tree Hash

Any Autopsy specific discussions, events, module releases, that don't fall into the other categories.

Moderator: carrier

Tiger Tree Hash

Postby robertniedzielski » Tue Jun 23, 2015 9:53 am

J've got database of DC++ downloaded files hashes, in TTH (Tiger Tree Hash),
has somebody experience in this kind of hash function in Autopsy? I've prepared small
java program with use of Jacksum 1.7.0 but first I have to export all files (mp3) from
Autopsy. It's rather unconvinient :geek:
Posts: 1
Joined: Tue Jun 23, 2015 9:45 am

Re: Tiger Tree Hash

Postby carrier » Fri Jul 10, 2015 1:24 pm

I don't know of any modules in Autopsy that calculate TTH. Are you looking to be able to search for files based on their TTH?

To export all files based on extension, you should be able to do a "File Search By Attributes" and specify extension and then right click on them all to export them.

You can also create an "Interesting Files" rule to flag files that have "MP3" in them and export them.

We've talked about being able to make Interesting File rules based on MIME type too, which could help in your case. But, we did not add that yet.
Posts: 45
Joined: Thu May 15, 2014 3:31 pm

Return to Autopsy General

Who is online

Users browsing this forum: No registered users and 1 guest