Metadata-Version: 2.1
Name: autotsk
Version: 1.0.0
Summary: Automatically creates mmls, fsstat and fls results for image files
Home-page: https://github.com/5f0ne/autotsk
Author: 5f0
License: MIT
Classifier: Operating System :: OS Independent 
Classifier: Programming Language :: Python :: 3 
Classifier: License :: OSI Approved :: MIT License 
Description-Content-Type: text/markdown
License-File: LICENSE.md

# Description

Automatically creates mmls, fsstat and fls results for image files

# Installation
```bash
# Sleuthkit needs to be installed 
# and available in PATH
sudo apt install sleuthkit 
pip install autotsk
```

# Usage

**From command line:**

`python -m autotsk --path PATH [--result RESULT]`

| Option | Short | Type | Default | Description |
|---|---|---|---|---|
|--path | -p | String | - | Path to img/dd file |
|--result | -r | String | ./autotsk-result | Path to result dir |


# Example

`python -m autotsk -p example.dd`

```
################################################################################

autotsk by 5f0
Automatically creates mmls, fsstat and fls results for image files

Current working directory: /path/to/autotsk

 Datetime: 01/01/1970 10:11:12

################################################################################

mmls Output
----------

DOS Partition Table
Offset Sector: 0
Units are in 512-byte sectors

      Slot      Start        End          Length       Description
000:  Meta      0000000000   0000000000   0000000001   Primary Table (#0)
001:  -------   0000000000   0000008191   0000008192   Unallocated
002:  000:000   0000008192   0000110591   0000102400   Win95 FAT32 (0x0b)
003:  -------   0000110592   0000212991   0000102400   Unallocated
004:  000:001   0000212992   0000458751   0000245760   NTFS / exFAT (0x07)
005:  -------   0000458752   0000466943   0000008192   Unallocated
006:  000:002   0000466944   0000569343   0000102400   Linux (0x83)
007:  -------   0000569344   0000577535   0000008192   Unallocated
008:  000:003   0000577536   0000782335   0000204800   Linux (0x83)
009:  -------   0000782336   0003911679   0003129344   Unallocated



Extracting Offsets
----------

Offset found: 8192
Offset found: 212992
Offset found: 466944
Offset found: 577536



Applying TSK Commands
----------

fsstat and fls for offset: 8192
fsstat and fls for offset: 212992
fsstat and fls for offset: 466944
fsstat and fls for offset: 577536



Result Location
----------

Path: ./autotsk-result

################################################################################

Execution Time: 0.075163 sec
```

Created files in result directory:

```
autotsk-result/
â”œâ”€â”€ 0-8192-fls.txt
â”œâ”€â”€ 0-8192-fsstat.txt
â”œâ”€â”€ 1-212992-fls.txt
â”œâ”€â”€ 1-212992-fsstat.txt
â”œâ”€â”€ 2-466944-fls.txt
â”œâ”€â”€ 2-466944-fsstat.txt
â”œâ”€â”€ 3-577536-fls.txt
â”œâ”€â”€ 3-577536-fsstat.txt
â””â”€â”€ mmls.txt
```

# License

MIT
