search

dasec / fishy

Toolkit for Filesystem based Data Hiding Techniques.
MIT License
36 stars 1 forks source link

NTFS:FileSlack: Make info switch consistent to FAT:FileSlack #19

Closed importantchoice closed 6 years ago

importantchoice commented 6 years ago

The current info method of the ntfs.fileslack module lacks some information, that the user would need to thoughfully handle fileslack. My suggestion would be to unify the output to match the output of the fat.fileslack module.

For instance:

$ fishy -d testfs-fat12.dd fileslack -d another -m /tmp/foo -i
File: another
  Occupied in last cluster: 4
  Ram Slack: 508
  File Slack: 1536
D-Kern commented 6 years ago

changed in 10e1bfb883eb5ce36dc5546624371c70a9bfde8f