Added implimentation for TSK_FS_META and tsk_fs_file_read

forensicmatt / libtsk-rs

Wrapper for TSK (Sleuth Kit) Bindings

Apache License 2.0

11 stars 5 forks source link

Added implimentation for TSK_FS_META and tsk_fs_file_read #3

Closed AbdulRhmanAlfaifi closed 3 years ago

AbdulRhmanAlfaifi commented 3 years ago

Added the following :

tsk_fs_meta.rs: A wrapper for TSK_FS_META.
read file functions (read_exact,read_iter and read_to).
TskFsFileIterator struct. An iterator over TskFsFile content bytes.

AbdulRhmanAlfaifi commented 3 years ago

Change TskFsFileHandler to TskFsFileHandle.
Change TskFsFileHandle::new() to accept TskfsAttr and read flag.
Fix a bug on `TskFsFileHandle Read trait where it will not detect end of data properly.
Added id function on TskFsAttr which return the attribute id.
Added a new test case to copy a file.

forensicmatt commented 3 years ago

@AbdulRhmanAlfaifi this is great! Thank you for your contribution. I will still make a couple tweaks (like renaming tsk_fs_file_handler.rs to tsk_fs_file_handle.rs, and TskFsFile::get_file_handler to TskFsFile::get_file_handle) but you did some solid work! This lib is still very alpha, so just keep in mind some things might change.