search

log2timeline / dfvfs

Digital Forensics Virtual File System (dfVFS)
Apache License 2.0
204 stars 45 forks source link

add support for file entry name aliases #435

Open joachimmetz opened 4 years ago

joachimmetz commented 4 years ago

FAT and NTFS have the concept of a short and long file names, these are similar to hard links with the exception that Windows treats these more like an alias. Or treat this as a special kind of alias hard link, since there is a corresponding $FILE_NAME attribute an $I30 index entry.

joachimmetz commented 4 years ago

Based on the output of fsutil hardlink list it does not appear 8dot3name (or short) filenames are considered hard links.

https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/fsutil-hardlink