1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
|
<?xml version="1.0" encoding="utf-8"?>
<!-- Contains only the modules that ship with TSK -->
<PIPELINE_CONFIG>
<PIPELINE type="FileAnalysis">
<MODULE order="1" type="plugin" location="tskHashCalcModule"/>
<!--<MODULE order="2" type="plugin" location="tskHashLookupModule" arguments="TODO: See README for how to create NSRL index file"/>-->
<MODULE order="3" type="plugin" location="tskFileTypeSigModule"/>
<MODULE order="4" type="plugin" location="tskEntropyModule"/>
<MODULE order="5" type="plugin" location="tskZipExtractionModule"/>
<MODULE order="6" type="plugin" location="tskLibExifModule"/>
</PIPELINE>
<PIPELINE type="PostProcessing">
<!--This pipeline configuration assumes that the RegRipper executable is named rip.exe and is present in the program directory-->
<!--<MODULE order="1" type="plugin" location="tskRegRipperModule" arguments="-e #PROG_DIR#/RegRipper/rip.exe; -o #MODULE_OUT_DIR#/RegRipper/"/>-->
<MODULE order="2" type="plugin" location="tskInterestingFilesModule"/>
<MODULE order="3" type="plugin" location="tskSaveInterestingFilesModule"/>
<MODULE order="4" type="plugin" location="tskSummaryReportModule"/>
</PIPELINE>
</PIPELINE_CONFIG>
|
