Hi all,
I’m experimenting (for personal use) with a file-analysis workflow for mounted disk images and wanted to sanity-check the approach with the community.
The idea is to extract artefact characteristics (timestamps, hashes, entropy, file-type-specific metadata, etc.) and store them in PostgreSQL. File-type-specific metadata are stored as JSONB so they can be queried directly (e.g., SQLite table counts, PNG dimensions/bit depth).
I’m curious:
does anyone here use a similar DB-centric approach?
are there pitfalls you’ve run into with JSONB for artefact metadata?
anything you wish you’d tracked early on but didn’t?
No GUI yet — this is more about backend design and workflow at the moment.