CBL - Campus del Baix Llobregat

Projecte llegit

Títol: An enhanced SleuthKit GUI for digital forensics


Estudiants que han llegit aquest projecte:


Director/a: HERNÁNDEZ SERRANO, JUAN

Departament: ENTEL

Títol: An enhanced SleuthKit GUI for digital forensics

Data inici oferta: 03-02-2017     Data finalització oferta: 03-10-2017



Estudis d'assignació del projecte:
    MU MASTEAM 2015
Tipus: Individual
 
Lloc de realització: EETAC
 
Paraules clau:
forensics, sleuth kit, react, redux, flux, cross-platform
 
Descripció del contingut i pla d'activitats:
 
Overview (resum en anglès):
The amount of digital information is growing every day. Due to its persistence is often used
as evidence on judgements. Digital forensics is a science that is intended to found this
proofs in order to make a reconstruction of the facts.

There are many tools to extract this information. Two well-known user interfaces are En-
Case Forensic and Autopsy. Those softwares offer the possibility to see the file system of
an image without modifying it (to preserve proof integrity), recover deleted files, generate
timelines and even search functions to find clues that helps their cases.

However, there are no open-source user-friendly interfaces that can run over Windows,
Linux and Max OS. In this project a new software, Img-spy, was created to perform those
operations regardless of the operating system.

With such a goal, in this project we have built The Sleuth Kit JavaScript wrapper, which
provides a JavaScript interface to the widely-use cross-platform open-source Sleuth Kit C
library. With such a wrapper, JavaScript can be used to develop new applications for digital
forensics analysis.

Besides being multi-platform, this project has been targeted to create a user-friendly frame-
work for the usual digital forensics’ work flow. This obvious purpose is very difficult to
achieve because users have different preferences. Then, Img-spy user interface is in-
tended to be customizable, giving the option to adjust the size of the interface panels and
supporting multiple themes.

The results of this project are a good example of how a scalable application can be built
using flux-like architecture based on React-Redux packages. Those modern libraries cre-
ate a unidirectional data flow that starts with actions that modify the current state of the
application and so affect the views of the user interface.


© CBLTIC Campus del Baix Llobregat - UPC