search

sleuthkit / autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
http://www.sleuthkit.org/autopsy/
2.29k stars 586 forks source link

XFS filesystem support #7891

Open grzeniek opened 3 months ago

grzeniek commented 3 months ago

Will autopsy natively support xfs filesystems images as data sources? XFS is nowadays very popular and often default choice when installing Linux server. Lack of XFS support makes it harder to analyze Linux images.

XFS and LVM/LVM2 (#7888) support is must have nowadays for forensics Linux images, I think.

Apart on that you make great job, Sleuthkit/Autopsy are awesome tools, thanks for it.

markmckinnon commented 2 months ago

If it can be compiled into Sleuthkit for Windows then the answer will be yes.