Creating Generic Plugins
Creating Generic Plugins
DFIR-OGRE provide generic parser that allows you to parse artefacts by simply defining a XML descriptor file, without the need to create python code. The following data types are supported
- CSV,
- Regular Expression (extracts artefacts from text files using a regular expression),
- Sqlite
- XML ,
The CSV tutorial provides a detailled step by step tutorial on how to create and use the descriptor. The others only describes the specificity of each parsers and how to use them.