Fixed evidence type handling

root
1 parent 375d9939
Showing 2 changed files with 11 additions and 8 deletions
bonetypes.py
digger.py
-typeDefinitions = {
-    "mft":      0x00,
-    "winreg":   0x01,
-    "evt":      0x02,
-    "edb":      0x03,
-    "info":     0x04
-}
 \ No newline at end of file
+global definitions
+definitions = {
+    "mft":      '00',
+    "winreg":   '01',
+    "evt":      '02',
+    "edb":      '03',
+    "info":     '04'
+}
+
@@ -20,6 +20,7 @@ from filelogger import FileLogger
 from hashlib import sha256
 import bonetypes
 import xml.etree.ElementTree
+import binascii
 def getModules():
     choiceList = []
@@ -73,7 +74,7 @@ def bagAndTag():
         for dir in dirnames:
             for subroot, subdirnames, subfilenames in os.walk(tombPath + dir):
                 for filename in subfilenames:
-                    boneList.append({"path" : subroot + "/" + filename, "type": dir})
+                    boneList.append({"path" : subroot + "/" + filename, "type": bonetypes.definitions[dir]})
     d.gauge_start(title="Hashing all collected artifacts...",width=60,height=10)
     boneCount = 0