google / GiftStick

1-Click push forensics evidence to the cloud
Apache License 2.0
139 stars 21 forks source link

Implement spliting DiskArtifact into multiple slices #138

Closed rgayon closed 1 year ago

rgayon commented 1 year ago

See #46

codecov-commenter commented 1 year ago

Codecov Report

Merging #138 (4dd1fa7) into main (342b0e2) will increase coverage by 1.07%. The diff coverage is 83.05%.

:exclamation: Current head 4dd1fa7 differs from pull request most recent head bd297ab. Consider uploading reports for the commit bd297ab to get more accurate results

@@            Coverage Diff             @@
##             main     #138      +/-   ##
==========================================
+ Coverage   80.21%   81.29%   +1.07%     
==========================================
  Files          24       24              
  Lines        1658     1812     +154     
==========================================
+ Hits         1330     1473     +143     
- Misses        328      339      +11     
Impacted Files Coverage Δ
auto_forensicate/recipes/disk.py 75.77% <23.80%> (+1.69%) :arrow_up:
auto_forensicate/auto_acquire.py 66.93% <68.75%> (+0.27%) :arrow_up:
auto_forensicate/uploader.py 87.03% <85.48%> (-1.09%) :arrow_down:
auto_forensicate/stamp/manager.py 100.00% <100.00%> (ø)
tests/auto_forensicate_tests.py 98.94% <100.00%> (+0.07%) :arrow_up:
tests/disk_tests.py 100.00% <100.00%> (ø)
tests/uploader_tests.py 100.00% <100.00%> (ø)
rgayon commented 1 year ago

Ran a full test, found same md5 for a disk that has been split and not!

Reconstruct with ls sda.image_* | sort -t_ -nk2 | xargs cat > sda.image