Our final iteration – setupapi_parser.py

In our final iteration, we will continue to improve the script through adding deduplication of processed entries and improving upon the output. Although the second iteration introduced the logic for filtering out non-USB devices, it does not deduplicate the responsive hits. We will deduplicate on the device name to ensure that there is only a single entry per device. In addition, we will integrate our usb_lookup.py script from Chapter 2, Python Fundamentals, to improve the utility of our script by displaying USB Vendor IDs (VIDs) and Product IDs (PIDs) for known devices.

We had to modify code in the usb_lookup.py script to properly integrate it with the setupapi script. The differences between the two versions ...

Get Learning Python for Forensics now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.