[sleuthkit-developers] [ sleuthkit-Feature Requests-2903757 ] HFS+ specific ffind code
Brought to you by:
carrier
From: SourceForge.net <no...@so...> - 2009-11-25 14:37:10
|
Feature Requests item #2903757, was opened at 2009-11-25 09:37 Message generated for change (Tracker Item Submitted) made by carrier You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=477892&aid=2903757&group_id=55685 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: File System Group: None Status: Open Priority: 5 Private: No Submitted By: Brian Carrier (carrier) Assigned to: Nobody/Anonymous (nobody) Summary: HFS+ specific ffind code Initial Comment: HFS+, like NTFS already does, should have special code to map a metadata address to a name. The current code recurses the directories until it finds a file that maps to the metadata. We could develop code that looks up the thread for the metadata address, and goes up the parent directory links in the catalog file. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=477892&aid=2903757&group_id=55685 |