hashlookup / hashlookup-forensic-analyser

Analyse a forensic target (such as a directory) to find and report files found and not found from CIRCL hashlookup public service - https://circl.lu/services/hashlookup/
https://hashlookup.github.io/hashlookup-forensic-analyser/
Other
124 stars 14 forks source link

[Idea] Option to unarchive #9

Open Maijin opened 2 years ago

Maijin commented 2 years ago

This is not an easy suggestion and it may also introduce risks but having an option to get archived files to get extracted recursively & hashed, I thought could also be an interesting add to hashlookup :)

(E.g of lib - https://githubplus.com/enzok/sflock or 7zip etc.)

adulau commented 2 years ago

Thank you! I like the idea (even it's a bit risky) but I could add it as an optional feature. Any recommendation regarding @enzok fork compared to the official one from @hatching? Is there a reason to use the fork?

enzok commented 2 years ago

I would use sflock2. It has a bunch of improvements in it.

adulau commented 2 years ago

Thank you! So sflock2 in PyPI is basically https://github.com/doomedraven/sflock/ repository?

enzok commented 2 years ago

Yes.

On Sun, Jan 2, 2022 at 9:58 AM Alexandre Dulaunoy @.***> wrote:

Thank you! So sflock2 in PyPI is basically https://github.com/doomedraven/sflock/ repository?

— Reply to this email directly, view it on GitHub https://github.com/hashlookup/hashlookup-forensic-analyser/issues/9#issuecomment-1003728391, or unsubscribe https://github.com/notifications/unsubscribe-auth/AB3X3YFLASBVGMCZMV4PXTTUUBRYXANCNFSM5LDUBH6Q . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

You are receiving this because you were mentioned.Message ID: @.***>

-- Lorenzo

“Happiness is not the absence of problems, but the ability to deal with them." - Albert Einstein

Maijin commented 2 years ago

Hi I simply searched quickly for sflock my bad 👍