Metadata-Version: 2.1
Name: ntrprtr-bitlocker-forensics
Version: 0.1.0
Summary: ntrprtr configurations for forensic analysis of bitlocker volumes
Home-page: https://github.com/5f0ne/ntrprtr-bitlocker-forensics
Author: 5f0
License: MIT
Classifier: Operating System :: OS Independent 
Classifier: Programming Language :: Python :: 3 
Classifier: License :: OSI Approved :: MIT License 
Description-Content-Type: text/markdown
License-File: LICENSE.md

# Description

ntrprtr configurations for forensic analysis of bitlocker volumes

# Installation

`pip install ntrprtr_bitlocker_forensics`

# Usage

**Shell:**

<hr>

**General**

| Option | Short | Type | Default | Description |
|---|---|---|---|---|
|--mode | -m | String | - | copy = Create a local copy of bitlocker forensics configuration files |

<hr>

**mode = copy**

| Option | Short | Type | Default | Description |
|---|---|---|---|---|
|--path | -p | String | "" | Path for local copy of ntrprtr configuration files |


# Example

To use this configuration files install `ntrprtr` and `ntrprtr_bitlocker_forensics`:

```bash
pip install ntrprtr
pip install ntrprtr_bitlocker_forensics
```

To use the files, create a local copy:

```bash
python -m ntrprtr_bitlocker_forensics -m copy -p .
```

It creates the following structure:

```
./ntrprtr-bitlocker-config
â”œâ”€â”€â”€bitlocker-metadata-header.json
â”œâ”€â”€â”€bitlocker-volume-header.json
```

Now just use the config as input for `ntrprtr`:

```bash
python -m ntrprtr -m interpret -p bitlocker-volume-header.bin -c ./ntrprtr-bitlocker-config/bitlocker-volume-header.json -r result.txt
```

# License

MIT
