puffyCid / artemis

A cross platform forensic parser written in Rust!
MIT License
59 stars 6 forks source link

Support Multivalue ESE columns #145

Closed puffyCid closed 1 month ago

puffyCid commented 1 month ago

What new feature do you think would be cool to add to artemis? Currently artemis does not parse multivalue ESE columns. https://github.com/libyal/libesedb/blob/main/documentation/Extensible%20Storage%20Engine%20(ESE)%20Database%20File%20(EDB)%20format.asciidoc#45-multi-values

It would be nice if we could parse this data

Describe the solution you'd like Correctly parse mutlivalue ESE data

Additional context N/A