SmutDetect was originally developed as a standalone application but is now being ported to work in Autopsy 3 as a module. The standalone version was mainly developed for Linux but worked partially on other OS. Even though the standalone application has currently more functionality the module offers greater potential as file selection based on file signature is easier and result of other modules such as the Video triage module may be possible in the future.
Current progress will be published as blog posts under the tag: SmutDetect4Autopsy.
- Ported the module to the Autopsy API 3.1
- Changed the results from File Tags to “Interesting Files” section
- Simple Scan of JPG, BMP, PNG & GIF files (seletion of files based on file signatures) for pixels with skin tone and computing percentages. Files are tagged with skin-tone percentages in increments of 10 to allow a categorised view of thumbnails
Testdata sets used so far
- E01 test images of thumbdrives containing a collection of pictures
- A Windows 7 Virtual machine mounted as a local VHD, added in Autopsy; contains several user profiles with different cached Internet browsing history and nature of images viewed by the “user”
- Implement Logging output
Port to 3.1 API
- Small Report Module?
- Better Tagging/Posting of result to the Blackboard (
currently tags are sorted by creation dateand do not allow subtags; hope to find something in API 3.1)
- Possible input selection of the video triage module
- Video triage module seems to only buffer video frames in RAM?, there is no module output visible in the Case folder and it does not seem possible to use the results for further processing
- Found the following library which might solve the problem quickly with the following class (maybe with a lower sample rate than 5 seconds though) http://www.xuggle.com/public/documentation/java/api/com/xuggle/mediatool/demos/DecodeAndCaptureFrames.html
- New Algorithms for shape recognition
- Debug output for development support