Skip to content

PPN lookup can now be disabled; DFXML output for data discs

Compare
Choose a tag to compare
@bitsgalore bitsgalore released this 16 Jan 14:05
· 131 commits to master since this release

The main features in this release are:

PPN lookup can now be disabled

This is particularly useful for materials that are not part of the KB collection (and thus don't have an associated PPN identifier). PPN lookup can be disabled by setting the value of enablePPNLookup in the configuration file to False. See also the setup and configuration documentation. If enablePPNLookup is disabled, the PPN data entry widget in Iromlab's data entry GUI is replaced with Title widget. See also the section about Processing discs that are not part of the KB collection in the User Guide.

DFXML output

For data discs, Iromlab now uses Isobuster's new functionality to generate reports in Digital Forensics XML (DFXML) format. Note that currently the generated DFXML does not validate against the DFXML schema; details can be found here. These issues will most likely be addressed in future versions of Iromlab/IsoBuster.

Upgrading from previous versions

If you upgrade from a previous version of Iromlab, you will need to add an enablePPNLookup element to your configuration file. See the explanation here. Also, DFXML output only works for Isobuster 4.1 onward. Older versions of Isobuster may not work at all.