We have a draft design review up for a proposed Forensic Object Framework:
https://leapps.org/designs?design=forensic-object-framework
The goal is to add a normalized, cross-artifact object layer for LEAPPs while keeping normal artifact output authoritative. Parsers would check in typed forensic objects such as web visits, searches, bookmarks, downloads, and credentials. LAVA could then provide combined views across apps, platforms, and source artifacts.
This is posted for discussion here in iLEAPP, but to be clear this is for all LEAPPs.
Please review and add thoughts, concerns, or parser-specific use cases here.
We have a draft design review up for a proposed Forensic Object Framework:
https://leapps.org/designs?design=forensic-object-framework
The goal is to add a normalized, cross-artifact object layer for LEAPPs while keeping normal artifact output authoritative. Parsers would check in typed forensic objects such as web visits, searches, bookmarks, downloads, and credentials. LAVA could then provide combined views across apps, platforms, and source artifacts.
This is posted for discussion here in iLEAPP, but to be clear this is for all LEAPPs.
Please review and add thoughts, concerns, or parser-specific use cases here.