[sleuthkit-users] fls & short names
Brought to you by:
carrier
From: Brian C. <ca...@sl...> - 2005-08-11 17:23:31
|
I'm in the process of upgrading the unicode and short name handling of TSK for FAT and NTFS. Currently, fls prints the short (i.e. 8.3) name of a FAT file in parentheses, but skips the short name for NTFS files. I'm inclined to change the behavior so that the short FAT name is also skipped. It can be found from the istat output, but would not be in the fls output. Anyone have major issues with that and find the short names useful? thanks, brian PS - For those who have asked, yes I realize that I missed the July 15th issue of the Informer... too many things going on. PPS - For those who will be at DFRWS or HTCIA in the next few weeks, I got some small TSK stickers made up so come track me down if you want some. |