search

pjrinaldi / wombatforensics

linux c++, fox-toolkit, multi-threaded forensic gui tool
GNU General Public License v2.0
47 stars 12 forks source link

Verifying Forensic Images #342

Closed pjrinaldi closed 3 years ago

pjrinaldi commented 4 years ago

Working on verifying forensic images so when you are done with the analysis, you can verify that the forensic images haven't changed at all.

got groudwork implemented in comments, need to implement properly and then test.

pjrinaldi commented 3 years ago

working, just need to cleanup code and test for multiple images...

pjrinaldi commented 3 years ago

can get md5 from e01 and aff using their ewfinfo and affinfo functions maybe incase there is no log file to read from...

pjrinaldi commented 3 years ago

now verify and comprae md5 for EWF and AFF files...