CYBER SECURITY AND

NETWORK FORENSICS

Ramesh Manza
Professor,
Bio Medical Image Processing Laboratory,
Department of Computer Science and Information
Technology, Dr. Babasaheb Ambedkar
Marathwada University, Aurangabad (MS)
India-431004,
rrmanza.csit@bamu.ac.in, www.rameshmanza.in,
manzaramesh@gmail.com
Python Digital Forensics
Python Digital Forensics - Getting Started
Why Python for Digital Forensics?

• Python is a popular programming language and

– is used as tool for
• cyber security,
• penetration testing as well as
• digital forensic investigations.

• When you choose

– Python as your tool for digital forensics,
• you do not need any other
– third party software for
» completing the task.
Python Digital Forensics - Getting Started
Why Python for Digital Forensics?

❑ Simplicity of Syntax
❑ Python’s syntax is simple compared to other languages,
❑ that makes it easier for one
❑ to learn and
❑ put into use for digital forensics.

❑ Comprehensive inbuilt modules

❑ Python’s comprehensive inbuilt modules are an excellent aid for
❑ performing a complete digital forensic investigation.

❑ Help and Support

❑ Being an open source programming language,
❑ Python enjoys excellent support from the
❑ developer’s and users’ community.
Python Digital Forensics - Getting Started
Features of Python

• Provides Various Modules and Functions − Python has large standard

library which allows us to
– use rich set of modules and functions for our script.

• Supports Dynamic Type Checking − Python supports dynamic type

checking and
– provides very high-level dynamic data types.

• GUI Programming − Python supports GUI programming to develop

– Graphical user interfaces.

• Integration with other programming languages − Python can be

easily integrated with
– other programming languages like C, C++, JAVA etc.
Python Digital Forensics - Getting Started
Features of Python

• Easy to Learn − Python is a developer friendly and easy to learn

language, because
– it has fewer keywords and simplest structure.

• Expressive and Easy to read − Python language is expressive in

nature;
– hence its code is more understandable and readable.
Python Digital Forensics - Getting Started
Features of Python

• Cross-platform Compatible − Python is a cross-platform compatible

language which means
– it can run efficiently on various platforms such as UNIX, Windows, and Macintosh.

• Interactive Mode Programming − We can do interactive testing and

debugging of code because Python supports an interactive mode for
programming.
Python Digital Forensics - Getting Started
Installing Python
Python Digital Forensics - Getting Started
Setting the PATH

Path Setting at Windows

❖ Type path %path%;C:\Python at the command prompt and
then press Enter.
Running Python
Method 1: Using Interactive Interpreter.
❖ You can choose any of the following three methods to start the
Python interpreter −
• Step 1 − Enter python at the command line.
• Step 2 − Start coding right away in the interactive interpreter
using the commands shown below .

C:> python # Windows/DOS

Python Digital Forensics - Getting Started
Method 2: Using Script from the Command-line
• We can also execute a Python script at command line by invoking
the interpreter on our application. You can use commands shown
below −

C: >python script.py # Windows/DOS

Discussion
• Thank you