search

pjrinaldi / wombattools

set of command line tools for use with a custom forensic imager and custom logical imager using walafus, zstd, and blake3 which is integrated with wombat forensics and can also be used on their own.
BSD 2-Clause "Simplified" License
1 stars 1 forks source link

enterprise imager #23

Closed pjrinaldi closed 6 months ago

pjrinaldi commented 7 months ago

also working on enterprise imager, which is a shell script using existing tools and parallel to make a segments of a raw image at the same time in parallel and see if that is faster than imaging straight through.

need to figure out how to feed the pieces through a hasher to verify the image as well as how the best method to compress the images: squashfs, tar zstd, 7z, xz, lz4, gzip, etc.

for hashing, will need to build a c/c++ program which takes each piece and feeds it the hash update function and then calculates it at the end. should be able to build quickly based off blake3 or wombatverify code.

pjrinaldi commented 7 months ago

the c++ hashing program, b3hasher works and is incorporated into the enterpriseimager script.

need to hash the device at some point, probably just b3sum /dev/mmcblk0 & so it works at the same time as the imaging.

need on screen logging to provide updates as to what is going on and then i can run a large test and see how it compares to an actual image file vs old school method.

pjrinaldi commented 7 months ago

fixed leading hex zero in b3hasher and created an enterpriseverify script. Need to make the image verification in enterpriseimager optional with a switch. also need to implement more on screen logging and population to the log file.

pjrinaldi commented 6 months ago

incorporating the walafus stuff into wfi format, so i'm gonna scrap my enterprise imager stuff and go from there.