dfir-toolkit icon indicating copy to clipboard operation
dfir-toolkit copied to clipboard

Published 20 hours ago • verified publisher icon dfir-dd

pf2bodyfile | Creation time is not available

Open M1ra1B0T opened this issue 1 year ago • 2 comments

I do get the following error message when running pf2bodyfile: Error: IO operations error: creation time is not available for the filesystem

My setup:

  • kali linux
  • I have connected an external drive with NTFS filesystem.
  • An E01 image is stored on the external drive
  • I have mounted the E01 image, the mountpath is also on the external drive

M1ra1B0T avatar Feb 27 '24 08:02 M1ra1B0T

That problem should be fixed with a recent version for forensic-rs. Can you please give it a try?

janstarke avatar Apr 18 '24 07:04 janstarke

Just an update to better understand the status of the error. The error is still present as https://github.com/dfir-dd/dfir-toolkit/pull/40 did not succeed.

M1ra1B0T avatar Apr 29 '24 08:04 M1ra1B0T

seems to be fixed by rust 1.78 (see rust-lang/rust#121691)

janstarke avatar May 16 '24 09:05 janstarke