-
Notifications
You must be signed in to change notification settings - Fork 22
/
a1_script_hashchecker_onlineDBs.sh
executable file
·42 lines (41 loc) · 1.2 KB
/
a1_script_hashchecker_onlineDBs.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
#/bin/bash
#
# This scrip is designed to do the basic inistial investigation for a memory image.
# By: Matthew Ulm
# Date: Auguest 8, 2014
#
### Set some variables
##########################
RDIR="/home/sansforensics";
HOME="/cases";
VOL="vol.py";
DSVT="/home/sansforensics/volgui/tools/dsvtsearch.py";
HEADER="Accept: text/html"
UA21="Mozilla/5.0 Gecko/20100101 Firefox/21.0"
UA22="Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.13; ) Gecko/20101203"
TODAY=$(date +"%Y-%m-%d")
FTIME="$(date)"
#
#
### Get some information from the user.
#######################################
#
# Get the case name.
echo "I need to get some information first... "
echo "What is the case name? :"
read CASE
if [ ! -d "$HOME/$CASE" ]; then
echo "It does not look as if the case has been setup just yet.";
echo "I will create the necessary case directory. Please make sure to";
echo "Memory file there before proceeding. I will now exit.";
mkdir -p $HOME/$CASE
echo " "; sleep 1; exit;
fi
#
#
### Let's start going through our hsahesh.
echo "I am going to check the hashes of our pulled IPv4 addresses with various"
echo "databses that are avilable online."
#
while read -r line; do
done <