dfvfs
dfvfs copied to clipboard
Digital Forensics Virtual File System (dfVFS)
The libtsk FAT and exFAT implementations have issues: * gaps in format support https://github.com/py4n6/pytsk/issues/82 * serious code weaknesses https://github.com/sleuthkit/sleuthkit/pulls?q=is%3Apr+author%3Ajoachimmetz+ Look for / create a more reliable alternative * [x] complete...
FAT and NTFS have the concept of a short and long file names, these are similar to hard links with the exception that Windows treats these more like an alias....
Add compressed stream support for: - [x] ~~[LZMA](https://codereview.appspot.com/283280043/)~~ - [x] ~~[XZ](https://codereview.appspot.com/283280043/)~~ - [ ] COMPRESS (.Z) - [ ] DEFLATE add test to tests/file_io/compressed_stream_io.py
The FVDE back-end has been superseded by CS back-end Look into removing ImageFileTestCase
Symbolic links can contain an absolute path. If the file system was mounted this might result in an unresolvable link. Use last mount point in ext to try to correct...
Ie: the case of Docker containers Some pre-work exploring these in docker-explorer
Fixes #408
Do you have plans to add support for this file system which we are starting to see on Android devices?