search

shmsoft / FreeEed

Open source eDiscovery
http://freeeed.org
Apache License 2.0
103 stars 36 forks source link

EWF format #185

Open markkerzner opened 7 years ago

markkerzner commented 7 years ago

I was testing some files/images and seems that it doesn't handle E01/L01 (EnCase) or .AD1 (FTK) files. I know that the EWF (Expert Witness Compression Format) is open-source and could be implemented into the software using the lib https://github.com/libyal/libewf. The implementation of this support would be good to avoid changing metadata when staging information, if an inadvertent user uses copy instead of robocopy (or any forensic moving tool) or an antivirus takes place, it could mess with the metadata. L01s can be used as a container to preserve this metadata.

markkerzner commented 7 years ago

Consider structuring it as optional, because it is an LGPL license which will force the people to open source their code, and FreeEed is Apache license, which is business-friendly.