/object.detection4autopsy

Primary LanguageJavaMIT LicenseMIT

Object Detection for Autopsy

This module is developed in Java, allow to use a state-of-the-art, real-time object detection system called Yolo on open-source forensics software called Autopsy.
This module is a FileIngestModule, in the future will bring a ReportModule too.

It is sponsored by Instituto de Telecomunicações developed by Rúben Caceiro and guided by Patrício Domingues.

Mode of operation

Remote mode

This mode has two components:

  1. object.detection4autopsy.server, the installation process is described on repository.
  2. object.detection4autopsy, the installation process is described below

Pros:

  • Allow to invest on a powerfull machine and share between several users, insteaded invest in several machines less powerfull.
  • Allow to not block the computer to another tasks, because this process requires a lot resources and can leave the machine less usable.
  • You can use this mode to simulate the local mode you have to install the server on you machine and configure the module to connect to 127.0.0.1 or localhost and the behaviour is local. (If you want use this locally must use this setup for now)

Cons:

  • This mode of operation can be a bottle neck, because if a task took to long to finish the rest will be delayed.

Local mode

Not implemented yet This mode only has on component that is this module, and allow to the user take functionality locally.

Pros:

  • This mode of operation will not be a bottle neck, because only process the local ingest
  • Allow to you extract a first glance of your results.

Cons:

  • You have to invest in a better machine, a common worksation, with 2 or 4 cores and no nVidia GPU, cannot extract the results as fast as you want.
  • You may notice that your machine became slow and a little unresponsive while run the insgest module

Minimum Requirements

  • Autopsy 4.7.0 or newer
  • Windows, Linux or macOS

Installation

  • Download the lastest release nbm file.
  • Click Tools Main page
  • Click Plugins After tools clicked
  • Click Downloaded tab and then Add Plugins button After plugins clicked
  • Find the file and then click open After add plugins clicked
  • Click Install After open clicked
  • Click Next After install clicked
  • Accept the terms and then Next After next clicked
  • Click Continue After continue clicked
  • Click Close After continue clicked
  • Will prompt that module signature isn't trustable, we try fix this problem
  • And now you can run the ingest modules has usual
  • After this if you want to use remote you must have to install the server and run it