Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement Forensic Image Properties #486

Open
pjrinaldi opened this issue Dec 16, 2023 · 7 comments
Open

Implement Forensic Image Properties #486

pjrinaldi opened this issue Dec 16, 2023 · 7 comments
Assignees
Milestone

Comments

@pjrinaldi
Copy link
Owner

need to implement forensic image properties where applicable. EWF has properties, AFF4 has properties, wfi has properties, what else has properties for forensic images?

@pjrinaldi pjrinaldi added this to the v0.5 milestone Dec 16, 2023
@pjrinaldi pjrinaldi self-assigned this Dec 16, 2023
@pjrinaldi
Copy link
Owner Author

handling no crashes or hangs when the forensic image properties don't exist. need to build them, but want some time to think on them.

@pjrinaldi
Copy link
Owner Author

making progress on how to handle forensic image properties. just need to get properties, right them to the file and then read them back.

@pjrinaldi
Copy link
Owner Author

making progress on ewf properties. just need to pull them all in and then write them to a string so i can then write them to a file. the loop properties fail, and it could be because the uint8_t id value has a trailing \0 or doesn't have a trailing \0, need to check the header file and see and then fix accordingly, since the manual "case_number" entry works.

@pjrinaldi
Copy link
Owner Author

properties implemented for ewf. it works. just need to implement other properties for the other forensic images.

@pjrinaldi
Copy link
Owner Author

vhd/vhdx is implemented, working on aff4 next.

@pjrinaldi
Copy link
Owner Author

qcow/qcow2 is working. aff4 is on hold, that is crazy, complex, and convaluted. vmdk is working. need a phdi test image to implement phdi.

@pjrinaldi
Copy link
Owner Author

need to implement wfi and sfs properties next.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant