Comments (3)
FYI this is also on the roadmap: https://github.com/log2timeline/dfvfs/wiki/Roadmap, so this is definitely a feature we want to put in. However currently the main priority is improving NTFS support seeing there are more interesting artifacts to be obtained and L01 can be also be read after mouting with "ewfmount -f files".
I suggest either adding support for L01s in pytsk3 or developing EWF file entry and file system objects to manage these directly.
This would add yet another abstraction layer and seeing the state of TSK abstraction I rater not. Also L01 is more like an archive file than a disk image.
from dfvfs.
This would add yet another abstraction layer and seeing the state of TSK abstraction I rater not. Also L01 is more like an archive file than a disk image.
This is why I suggested developing an EWF file entry and file system separate from using TSK. It would remove a layer of abstraction. The pyewf library contains enough methods to traverse through the internal directories to implement our own dfvfs file system type that does not rely on TSK.
L01 can be also be read after mouting with "ewfmount -f files".
Thank you for pointing me to this tool. This solution will work until there is official support.
from dfvfs.
This is why I suggested developing an EWF file entry and file system separate from using TSK. It would remove a layer of abstraction. The pyewf library contains enough methods to traverse through the internal directories to implement our own dfvfs file system type that does not rely on TSK.
Agree, I'll try to bump the priority on this but libewf needs some love as well but currently other features have a higher priority e.g. improving NTFS support which has uncovered some limitations in pytsk/TSK that need to solved or worked-around.
from dfvfs.
Related Issues (20)
- Remove FVDE back-end
- Add support for encrypted MODI images
- Add support for LDM volume system
- Add support for Linux Software Raid
- switch dfVFS to use alternative APM implementation instead of libtsk
- switch dfVFS to use alternative MBR implementation instead of libtsk
- Have resolver open volume system
- Add support for VDI images
- Add support for SGZIP images
- Add ISO9660 support
- switch dfVFS to use alternative ISO-9660 implementation instead of libtsk
- Expose file system metadata extents via API
- CI tests failing with: ImportError: DLL load failed while importing _openssl HOT 5
- Add support for empty GPT with partitions in MBR
- replace Cryptography
- OS: ensure extended attribute names are returned as strings
- pytsk import changes localtime globally in the environment HOT 4
- Add support for GPT and APFS aliases HOT 1
- Add support for LVM alias
- Change path specification to better handle filename edge cases
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dfvfs.