search

pjrinaldi / wombatforensics

linux c++, fox-toolkit, multi-threaded forensic gui tool
GNU General Public License v2.0
47 stars 12 forks source link

Tagging/Reporting Framework #337

Closed pjrinaldi closed 3 years ago

pjrinaldi commented 4 years ago

Tagging and Reporting are currently implemented for main directory treeview. I need to abstract this code so I can use the same tagging/reporting code for the registry viewer as well as future viewers such as mbox, vss, etc.

will move tagging code into tagging.cpp/.h

pjrinaldi commented 4 years ago

tagging reporting framework for artifacts such as registry, mbox, vss, etc.. is working. just need to do some testng for registry and then i can close and implement for other artifacts as i implement them.

pjrinaldi commented 3 years ago

the issue is that when i retar using the library, it is only appending and not removing files which have since been removed from the existing tar file...

pjrinaldi commented 3 years ago

fixed tarring issue by renaming existing .wfc to .wfc.old, then rather than creating to existing tar, it creates to new tar and then i remove the .wfc.old on completion. if something fails, you can alsways copy the .wfc.old to .wfc and work from the last good version of the case.