Python is a foundational tool in digital forensics. Many open-source parsers, including iLEAPP, ALEAPP, VLEAPP, and RLEAPP, run on it. Here is how to install it correctly.
Windows
- Go to the official download page: python.org/downloads.
- Download the latest Python 3 installer for Windows.
- Run the installer.
- Important: check the box labeled Add python.exe to PATH on the first screen.
- Click Install Now.
- When it finishes, open Command Prompt and run
python --versionto confirm the install.
macOS
- Go to python.org/downloads/macos.
- Download the latest macOS installer (a
.pkgfile). - Open it and follow the prompts.
- Open Terminal and run
python3 --version. - If it prints a version number, Python is installed.
Tips
- pip, Python's package manager, is included with the installer. Run
pip --version(orpip3on macOS) to check. - Don't need to code? iLEAPP, ALEAPP, VLEAPP, and RLEAPP now ship ready-to-run releases at leapps.org/releases, so you can use them without installing Python. Python matters when you want to run them from source or modify a parser.
- Most LEAPP tools list their dependencies in a
requirements.txtfile. Install them withpip install -r requirements.txtfrom the tool's folder. - For editing scripts, Visual Studio Code and PyCharm are both good choices.
Once Python is set up, head to the Tools page to find parsers to try.