slackbuilds_ponce/python/dfvfs
Barry J. Grundy c39054c9fe python/dfvfs: Updated for version 20150117.
Signed-off-by: Willy Sudiarto Raharjo <willysr@slackbuilds.org>
2015-01-22 06:34:16 +07:00
..
dfvfs.info python/dfvfs: Updated for version 20150117. 2015-01-22 06:34:16 +07:00
dfvfs.SlackBuild python/dfvfs: Updated for version 20150117. 2015-01-22 06:34:16 +07:00
README
slack-desc

dfvfs (Digital Forensics Virtual File System - python module)

This package provides read-only access to file-system objects from various 
storage media types and file formats. The goal of dfVFS is to provide a generic
interface for accessing file-system objects, for which it uses several 
back-ends that provide the actual implementation of the various storage media 
types, volume systems and file systems.

Supported:

    EWF (EWF-E01, EWF-Ex01, EWF-S01) 
    QCOW version 1, 2 
    Storage Media device 
    (split) Storage Media RAW 
    VHD 
    VMDK 

Note that at the moment differential images are not supported.
Volume systems

Supported:

    APM 
    BitLocker (BDE) 
    GPT 
    MBR 
    VSS 

Planned:

    FileVault2 (CoreStorage) 
    LDM
    LUKS 
    Linux LVM version 1, 2 
    Software Raid 

File systems

Supported file systems:

    ext version 2, 3, 4 
    FAT 
    HFS, HFS+, HFSX 
    NTFS version 3 
    UFS version 1, 2 

TODO add more detail here regarding FAT and other supported FS
Compressed stream file types

Supported:

    bzip2
    gzip
    zlib (both zlib-DEFLATE and raw-DEFLATE) 

Archive file types

Supported:

    tar
    zip