Dropbox Forensics Tools

Dropbox Forensics Tools è un nuovo pacchetto di utility reso disponibile dalla Cybermarshal che permette di analizzare l’utilizzo del famoso File Storage Dropbox da parte di un utente che sfrutta l’ambiente Desktop per gestire i propri file online, le utility scritte in Python possono essere utilizzare sui sistemi Windows, Macintosh, e Linux .

Il pacchetto include i seguenti sei tools:

  • read_config script outputs the contents of the Dropbox config.db file in human-readable form. This includes the user’s registered e-mail address and Dropbox identifier, software version information, and a list of the most-recently-changed files.
  • read_filecache_config script outputs configuration information from the Dropbox filecache.db file. This includes information about shared directories that are attached to the user’s Dropbox account.
  • read_filejournal script outputs information about Dropbox synchronized files stored in the filecache.db file. This includes local and server-side metadata and a list of block hashes for each Dropbox-synchronized file.
  • read_sigstore script outputs information from the Dropbox sigstore.db file, which is an additional source of block hashes.
  • hash_blocks script produces a block hash list for any file. This block hash list can be compared to the block hashes from read_filejournal or read_sigstore.
  • dropbox_contains_file script hashes one or more files (as per hash_blocks) and compares the resulting block hash list to the files listed in filecache.db (as per read_filejournal) and reports whether the files are partially or exactly the same as any Dropbox-synchronized files.

È possibile effettuare il download di Dropbox Forensics Tools direttamente sul sito ufficiale dello sviluppatore.

Via | Stefano Zanero

  • Giaba90

    (Dropbox Forensics Tools è un nuoto pacchetto ) c’è una U in +