dfvfs
dfvfs copied to clipboard
Digital Forensics Virtual File System (dfVFS)
add functionality to map volume offset to file entry
Add support for mixed-case file systems NTFS has a new case-sensitive folders feature, this makes the file system mixed-case add support to dfVFS / back-ends for mixed-case file systems
Check behavior of os_file_system FileEntryExistsByPathSpec on broken link
On Windows, dfvfs Exceptions can contain messages with returns but without the new line character. This can lead to message truncation when exceptions are thrown. If I run the following...
Ref https://github.com/log2timeline/plaso/issues/2365
Windows represents paths with an ADS as `filename:ADS` MacOS represents paths with a resource fork as `filename/..namedfork/rsrc`
Add file system support for eCryptFS - http://ecryptfs.org/
Blocked on a back-end implementation to parse BtreeFS