search

pjrinaldi / wombatforensics

linux c++, fox-toolkit, multi-threaded forensic gui tool
GNU General Public License v2.0
47 stars 12 forks source link

Reading AFF4 images #437

Closed pjrinaldi closed 1 year ago

pjrinaldi commented 2 years ago

Implementing an AFF4 parser, it seems to be working.

pjrinaldi commented 2 years ago

will need images to test out the aff4 reader. implemented using aff4-cpp-lite library

pjrinaldi commented 2 years ago

aff4 image appears to be opened and read, the partitons are found and the file system is starting to parse, but then it hangs and never seems to finish reading it. I'll need other images to test which aren't ntfs to ensure the issue isn't with my ntfs parser and is some issue with the aff4 imager.