Re: [sleuthkit-users] TSK Unicode support

[Brian C. <ca...@sl...>]

On Jun 2, 2005, at 10:20 AM, Jaime Chang wrote:

> All,
>
> I know that TSK does not support Unicode (except for some patches).
>
> My main question is if this is just a limitation for presentation 
> (i.e. what the TSK command prints out) or for how the data is stored 
> internally.

Currently, it internally saves everything in ASCII.  The patches 
convert the NTFS names to UTF-8 and store them instead.  I have tried 
to do a global fix, but usually run out of time.  My goal eventually is 
to store both the ASCII and Unicode names in an internal data structure 
(as well as the short and long FAT names as we previously discussed).  
I have been waiting on this because I do not fully understand how UTF-8 
and UTF-16 and internally handled by the OS and within C.

brian