Creating a paper trail

Recipe Difficulty: Medium

Python Version: 2.7 or 3.5

Operating System: Any

Most imaging utilities create audit logs recording the details of the acquisition media and other available metadata. Admit it; unless something goes horribly wrong, these logs are mostly untouched if the evidence verifies. Let's change that and leverage the newly created HTML dashboard from the previous recipe and make better use of this acquisition data.

Getting started

All libraries used in this script are present in Python's standard library or functions imported from the prior script.

How to do it...

We parse acquisition logs with these steps:

1. Identify and validate FTK logs.
2. Parse the log to extract relevant fields.
3. Create a dashboard with the acquisition data.

How it works...

First, we import the required libraries to handle argument parsing, parsing dates, and the html_dashboard script we created in the previous recipe:

from __future__ import print_function
import argparse
from datetime import datetime...