sleuthkit-users

[sleuthkit-users] File/Directories Names using alternate encoding formats?

[Kucenski, M. A. <Mat...@di...>]

If I have a drive that was used in a foreign country and the filenames are
encoded using a different codepage, what will Sleuthkit do with those file
names?  Should it just display garbage?  Has any thought been put into
allowing the user to change the codepage when running the various tools?
Just looking to find out where the tool stands on this subject.

Thanks,
-Matt

Re: [sleuthkit-users] File/Directories Names using alternate encoding formats?

[Brian C. <ca...@sl...>]

On Sep 22, 2004, at 12:41 PM, Kucenski, Matthew A. wrote:

> If I have a drive that was used in a foreign country and the filenames 
> are
> encoded using a different codepage, what will Sleuthkit do with those 
> file
> names?  Should it just display garbage?  Has any thought been put into
> allowing the user to change the codepage when running the various 
> tools?
> Just looking to find out where the tool stands on this subject.

The current version changes all Unicode characters into ASCII, so you 
will lose the special characters.  There is a patch for an older 
version of TSK at:

http://www.monyo.com/technical/unix/TASK/

My plan is to store both versions of the name in TSK v2 and display 
which ever one is specified on the command line.  But, that may not be 
for a while.

brian