sepinf-inc / IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.
Other
982 stars 220 forks source link

BpList parser #2350

Open patrickdalla opened 1 month ago

patrickdalla commented 1 month ago

Tika BPList parser converts binary plist files to XML and extracts some data.

This parser converts it to an XHTML expandable tree.

Additionally, when NSDate objects are found inside BPList file, date metadata is created.

When NSData object is found, they are extracted as subitems, with the name equals to the dictionary path name where the object was found.

@joao-fernando , could you test and suggest/implement improvements?

It would closes 1773.

lfcnassif commented 1 month ago

Thank you @patrickdalla!