obsidianforensics/hindsight

Errors while running hindsight against MacOS artifacts

dfirhoze opened this issue · 1 comments

dfirhoze commented

Describe the problem
Getting the below error while running Chrome data through KAPE as well as the standalone Hindsight tool.

Screenshots or Console Output
image

Expected behavior
Parse the chrome artifacts and output the xlsx results file.

hindsight.log Snippet
If possible, attaching the (sanitized if necessary) hindsight.log file output covering the problem run is very helpful for debugging.

System Details

  • Analysis System OS: Windows 10
  • Method of Running Hindsight: hindsight and KAPE
  • Hindsight version: 2023.3.0.0
  • Target System OS: MacOS
  • Target Browser: Chrome
obsidianforensics commented

Thanks for the report. From the output, it looks like Hindsight throws an exception when the file (History in your case) isn't actually a database; perhaps the collection was corrupted somehow.

I was able to reproduce with a dummy, non-database History file. I'll work on a fix for the exception, so the rest of the processing can continue.