search

pjrinaldi / wombatforensics

linux c++, fox-toolkit, multi-threaded forensic gui tool
GNU General Public License v2.0
46 stars 12 forks source link

Orphan/Deleted Files #447

Open pjrinaldi opened 1 year ago

pjrinaldi commented 1 year ago

Need to add orphan files to digging deeper, which ensures the intial processing stays fast...

now if in normal parsing of a file system type such as ext leads to simple orphan/deleted file parsing without any extra processing, than i will include that in the initial parsing.

pjrinaldi commented 1 year ago

added gui functionality to dig deeper. need to implement the actual functionality later.

pjrinaldi commented 6 months ago

so fat12/16/32 orphans deleted are taken care of while parsing. for exfat deleted is taken care of while parsing. orphans will need to be done with dig deeper functionality.

pjrinaldi commented 6 months ago

exfat orphan parsing will be a part of dig deeper. it is almost implemented but seems to hang, will need to debug and fix.