Chat minor improvements

sepinf-inc / IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.

Other

962 stars 219 forks source link

Chat minor improvements #2286

Open aberenguel opened 2 months ago

aberenguel commented 2 months ago

I'm creating this issue to group some commits with the purpose of improve the analysis of case with chats.

By now, I implements the following:

TelegramParser: use chat name from decodedData to avoid lower case names
Telegram extractor: use ID of groups as positive value.
Use "Communication:Participants" and "Communication:Admins" in internal and external parsers, with values pattern "Name (ID: ID)" or "Name (ID: ID | phone:phone)"

aberenguel commented 2 months ago

@marcosammoura I've seen you are improving the chat names. Great observation! Feel free to contribute in this issue.

marcosammoura commented 2 months ago

@aberenguel, I will adapt new UFED parser chat naming code to follow patterns and constants you're using.