DFF Command line

[Chan9390]

When Digital Forensics Framework (dff) is executed on the command line, it executes with the following error:

android@tamer ~/Desktop> dff
loading modules in /usr/lib/python2.7/dist-packages/dff/modules
[OK]    loading VMWARE v1.0.0
[OK]    loading PARTITION v1.0.0
ImportError: No module named pyregfi
  File "/usr/lib/python2.7/dist-packages/dff/api/loader/loader.py", line 239, in __load
    module = imp.load_module(modname, file, pathname, description)
  File "/usr/lib/python2.7/dist-packages/dff/modules/databases/winreg/winreg.py", line 25, in <module>
    from hive import RHive
  File "/usr/lib/python2.7/dist-packages/dff/modules/databases/winreg/hive.py", line 15, in <module>
    import pyregfi
ImportError: No module named apsw
  File "/usr/lib/python2.7/dist-packages/dff/api/loader/loader.py", line 239, in __load
    module = imp.load_module(modname, file, pathname, description)
  File "/usr/lib/python2.7/dist-packages/dff/modules/databases/sqlite/sqlitedb.py", line 3, in <module>
    import apsw
[OK]    loading PARTITION v1.0.0
ImportError: No module named pyregfi
  File "/usr/lib/python2.7/dist-packages/dff/api/loader/loader.py", line 239, in __load
    module = imp.load_module(modname, file, pathname, description)
  File "/usr/lib/python2.7/dist-packages/dff/modules/databases/winreg/winreg.py", line 25, in <module>
    from hive import RHive
  File "/usr/lib/python2.7/dist-packages/dff/modules/databases/winreg/hive.py", line 15, in <module>
    import pyregfi
ImportError: No module named apsw
  File "/usr/lib/python2.7/dist-packages/dff/api/loader/loader.py", line 239, in __load
    module = imp.load_module(modname, file, pathname, description)
  File "/usr/lib/python2.7/dist-packages/dff/modules/databases/sqlite/sqlitedb.py", line 3, in <module>
    import apsw

[anantshri]

dff is used from standard debian packages so will have to check upstream, meanwhile realized that dff also has its own jessie repositories we might switch to them later.

https://github.com/arxsys/dff

However GUI / CLI both should work even with these errors.

pyregfi is a module recommended additionally by dff so that should not make much difference for normal usage untill and unless you want to explore windows registry and apsw is alternative for sqlite3 python so that should be already taken care off.

[Chan9390]

I tried sudo pip install apsw - it works. But when I tried for solving the error related to pyregfi - I didnt get the solution yet.