Home

dfVFS-snippets

The dfVFS-snippets, provides example scripts for various purposes that use the Digital Forensics Virtual File System (dfVFS).

This project is intended to give you an introduction into developing Python code using dfVFS. These pages assume you have at least a basic understanding of programming in Python.

Example scripts

Several a step-by-step examples are provided to create scripts that should work on both a directory or an image file.

• file entry lister script
• recursive hashing script

Troubleshooting

Some common troubleshooting tips that others have run into before you can be found here.

References

• dfVFS project source
• dfVFS project documentation

Other projects that use dfVFS:

• plaso
• winevt-kb
• winreg-kb