diff options
Diffstat (limited to 'python/dfvfs/README')
-rw-r--r-- | python/dfvfs/README | 61 |
1 files changed, 61 insertions, 0 deletions
diff --git a/python/dfvfs/README b/python/dfvfs/README new file mode 100644 index 0000000000000..ff996037fb67a --- /dev/null +++ b/python/dfvfs/README @@ -0,0 +1,61 @@ +dfvfs (Digital Forensics Virtual File System - python module) + +This package provides read-only access to file-system objects from various +storage media types and file formats. The goal of dfVFS is to provide a generic +interface for accessing file-system objects, for which it uses several +back-ends that provide the actual implementation of the various storage media +types, volume systems and file systems. + +Supported: + + EWF (EWF-E01, EWF-Ex01, EWF-S01) + QCOW version 1, 2 + Storage Media device + (split) Storage Media RAW + VHD + VMDK + +Note that at the moment differential images are not supported. +Volume systems + +Supported: + + APM + BitLocker (BDE) + GPT + MBR + VSS + +Planned: + + FileVault2 (CoreStorage) + LDM + LUKS + Linux LVM version 1, 2 + Software Raid + +File systems + +Supported file systems: + + ext version 2, 3, 4 + FAT + HFS, HFS+, HFSX + NTFS version 3 + UFS version 1, 2 + +TODO add more detail here regarding FAT and other supported FS +Compressed stream file types + +Supported: + + bzip2 + gzip + zlib (both zlib-DEFLATE and raw-DEFLATE) + +Archive file types + +Supported: + + tar + zip |