search

pjrinaldi / wombatforensics

linux c++, fox-toolkit, multi-threaded forensic gui tool
GNU General Public License v2.0
47 stars 12 forks source link

Functionalize Fuse Calls #344

Closed pjrinaldi closed 3 years ago

pjrinaldi commented 3 years ago

Currently working on functionalizing fuse calls, i.e. making function calls to fuse mount a forensic image such as aff, ewf, aff4, and sfs.

I think i have the initial test of fuse mounting/looping working for affv3:

Once i get this functional and working, I will try to implement aff4 using the aff4-cpp-lite library since that will compile properly on arch. Then i will try to functionally implement ewfmount, and then squashfuse.

If I can do all of that, I will have removed the issue laden QProcess command line calls for better controlled function calls within my program.

pjrinaldi commented 3 years ago

got affv3 and ewf to fuse mount and unmount using functionalized calls. initial testing seems to work correctly... am working on attempting to do squashfs sfs image.

implemented aff4, but it doesn't work, so there must be something wrong with the c++ library i'm using. will look into it further.

pjrinaldi commented 3 years ago

sfs is still confusing me and isn't working correctly. implemented zmg-utils which includes the ability to functionally make a zmg'd raw forensic image and fuse mount that image. also will verify as well.

pjrinaldi commented 3 years ago

functionalizing fuse works for ewf, aff, and zmg (internal forensic image format with good compression)

pjrinaldi commented 3 years ago

will close issue for now since functionalization is working correctly.