Skip to content
Snippets Groups Projects
Unverified Commit 6348591c authored by Richard Cordovano's avatar Richard Cordovano Committed by GitHub
Browse files

Merge pull request #6342 from APriestman/6813_ileapp

6813 iLEAPP doc
parents 9bc7a643 3617f1fc
No related branches found
No related tags found
No related merge requests found
/*! \page ileapp_page iOS Analyzer (iLEAPP)
[TOC]
\section ileapp_overview Overview
The iOS Analyzer ingest module runs iLEAPP (https://github.com/abrignoni/iLEAPP) and converts the results into results that can be viewed in Autopsy.
\section ileapp_config Using the Module
Select the checkbox in the Ingest Modules settings screen to enable the IOS Analzyer (iLEAPP) module. In Autopsy 4.17.0 the module only runs on .tar/.zip files found in a \ref ds_log "logical files data source".
\section ileapp_results Seeing Results
Results from the iOS Analyzer module will appear in the \ref tree_viewer_page under Results->Extracted Content.
\image html ileapp_main.jpg
*/
docs/doxygen-user/images/ileapp_main.jpg

216 KiB

...@@ -50,6 +50,7 @@ The following topics are available here: ...@@ -50,6 +50,7 @@ The following topics are available here:
- \subpage plaso_page - \subpage plaso_page
- \subpage drone_page - \subpage drone_page
- \subpage gpx_page - \subpage gpx_page
- \subpage ileapp_page
- Reviewing the Results - Reviewing the Results
- \subpage uilayout_page - \subpage uilayout_page
......
...@@ -49,6 +49,7 @@ The standard ingest modules included with Autopsy are: ...@@ -49,6 +49,7 @@ The standard ingest modules included with Autopsy are:
- <strong>\subpage plaso_page</strong> uses Plaso to create \ref timeline_page "timeline" events. - <strong>\subpage plaso_page</strong> uses Plaso to create \ref timeline_page "timeline" events.
- <strong>\subpage android_analyzer_page</strong> allows you to parse common items from Android devices. Places artifacts into the BlackBoard. - <strong>\subpage android_analyzer_page</strong> allows you to parse common items from Android devices. Places artifacts into the BlackBoard.
- <strong>\subpage gpx_page</strong> extracts geolocation data from .gpx files. - <strong>\subpage gpx_page</strong> extracts geolocation data from .gpx files.
- <strong>\subpage ileapp_page</strong> extracts data from iOS data sources.
When you select a module, you will have the option to change its settings. For example, you can configure which keyword search lists to use during ingest and which hash sets to use. Refer to the individual module help for details on configuring each module. When you select a module, you will have the option to change its settings. For example, you can configure which keyword search lists to use during ingest and which hash sets to use. Refer to the individual module help for details on configuring each module.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment