diff options
author | Barry J. Grundy <bgrundyatlinuxleo.com> | 2014-12-24 15:37:49 -0600 |
---|---|---|
committer | Robby Workman <rworkman@slackbuilds.org> | 2014-12-25 02:10:29 -0600 |
commit | 381b9c04e650c1d2f4d2d1cd5ea0ded77ebfb9ad (patch) | |
tree | 066208804340fda93eb4192fd156c487d5b73b7e /python/dfvfs/README | |
parent | eedf36be340806875087b07e04f824f1d9391db7 (diff) |
python/dfvfs: Added (Digital Forensics Virtual File System)
Signed-off-by: Robby Workman <rworkman@slackbuilds.org>
Diffstat (limited to 'python/dfvfs/README')
-rw-r--r-- | python/dfvfs/README | 61 |
1 files changed, 61 insertions, 0 deletions
diff --git a/python/dfvfs/README b/python/dfvfs/README new file mode 100644 index 0000000000000..ff996037fb67a --- /dev/null +++ b/python/dfvfs/README @@ -0,0 +1,61 @@ +dfvfs (Digital Forensics Virtual File System - python module) + +This package provides read-only access to file-system objects from various +storage media types and file formats. The goal of dfVFS is to provide a generic +interface for accessing file-system objects, for which it uses several +back-ends that provide the actual implementation of the various storage media +types, volume systems and file systems. + +Supported: + + EWF (EWF-E01, EWF-Ex01, EWF-S01) + QCOW version 1, 2 + Storage Media device + (split) Storage Media RAW + VHD + VMDK + +Note that at the moment differential images are not supported. +Volume systems + +Supported: + + APM + BitLocker (BDE) + GPT + MBR + VSS + +Planned: + + FileVault2 (CoreStorage) + LDM + LUKS + Linux LVM version 1, 2 + Software Raid + +File systems + +Supported file systems: + + ext version 2, 3, 4 + FAT + HFS, HFS+, HFSX + NTFS version 3 + UFS version 1, 2 + +TODO add more detail here regarding FAT and other supported FS +Compressed stream file types + +Supported: + + bzip2 + gzip + zlib (both zlib-DEFLATE and raw-DEFLATE) + +Archive file types + +Supported: + + tar + zip |