I have only one slight correction to what Willi has stated. The extension
of his patches for full Ext4 support in TSK is actually a Naval
Postgraduate School (NPS) Project.
I just happen to work for JHUAPL and would be happy if others wanted to
contribute.
-Kevin
On Fri, Apr 13, 2012 at 10:14 AM, Willi Ballenthin <wil...@gm...>wrote:
> Ken,
>
> I think the most promising development push is by the Johns Hopkins
> University Applied Physics Lab. About a year ago I put together a set
> of patches that bring support for the most common Ext4 structures to TSK
> (http://www.williballenthin.com/ext4/index.html). The JHUAPL is working
> to extend these patches to bring complete support. You may want to
> reach out Dr. Kevin Fairbanks to help out with the effort.
>
> Thanks,
>
> Willi
>
>
> On 04/12/2012 01:16 AM, Ken Chiang wrote:
> > Hello,
> >
> > Is anyone working on fls recursion into subdirectories for the ext4
> > filesystem? Latest stuff I've found says that it is still in the works.
> I
> > am just wondering if I should pick up this task and code up something.
> > Thanks.
> > Ken
> >
> >
> >
> >
> >
> ------------------------------------------------------------------------------
> > For Developers, A Lot Can Happen In A Second.
> > Boundary is the first to Know...and Tell You.
> > Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
> > http://p.sf.net/sfu/Boundary-d2dvs2
> >
> >
> >
> > _______________________________________________
> > sleuthkit-developers mailing list
> > sle...@li...
> > https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers
>
>
>
> ------------------------------------------------------------------------------
> For Developers, A Lot Can Happen In A Second.
> Boundary is the first to Know...and Tell You.
> Monitor Your Applications in Ultra-Fine Resolution. Try it FREE!
> http://p.sf.net/sfu/Boundary-d2dvs2
> _______________________________________________
> sleuthkit-developers mailing list
> sle...@li...
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-developers
>
|
