[sleuthkit-users] XFS support?

[Jesse B. <jes...@gm...>]

Hi all,

Looking through my email I see that almost exactly 2 years ago the question was posed for support of XFS filesystems by sleuthkit, and the answer at the time was “no”. Looking through the TSK website today, it appears that is still the case. Am I missing something somewhere?

RHEL 7 (and others I’m sure) are starting to automatically use XFS in some cases, so I expect to run into more and more instances and am looking for a tool (preferably TSK!) to support analysis. I’m no programmer (as my CS professors could attest to) but I’m willing to help if I can.

Cheers,

Jesse