py4n6 / pytsk

Python bindings for The Sleuth Kit (libtsk)
Apache License 2.0
92 stars 24 forks source link

New features pytsk on hold since status and future of libtsk unclear #64

Open joachimmetz opened 4 years ago

joachimmetz commented 4 years ago

Currently there are many open issues on the Sleuthkit issue tracker: https://github.com/sleuthkit/sleuthkit/issues

There appears to be activity in the form of commits but not in the form of response to issues and most PRs. No replies to direct inquiries with the maintainers.

Maintainers of Sleuthkit seem to currently lack the resources to address the open issues.

Many code weaknesses (https://github.com/sleuthkit/sleuthkit/pulls?q=is%3Apr+author%3Ajoachimmetz+) and incorrect/unexplained format interpretation have been found in libtsk, e.g. HFS+/HFS (https://github.com/py4n6/pytsk/issues/66), ext[2-3] (https://github.com/py4n6/pytsk/issues/60), NTFS (https://github.com/py4n6/pytsk/issues/61, https://github.com/py4n6/pytsk/issues/62), FAT (https://github.com/py4n6/pytsk/issues/82)

Bad security patch hygiene https://github.com/sleuthkit/sleuthkit/issues/2622

Since pytsk heavily depends on libtsk, new features for pytsk are on hold until these issues have been addressed