Digital Forensics Virtual File System
dfVFS, or Digital Forensics Virtual File System, provides read-only access to file-system objects from various storage media types and file formats. The goal of dfVFS is to provide a generic interface for accessing file-system objects, for which it uses several back-ends that provide the actual implementation of the various storage media types, volume systems and file systems.
dfVFS originates from the Plaso project and is also based on ideas from the GRR project. It was largely rewritten and made into a stand-alone project to provide more flexibility and allow other projects to make use of the VFS functionality. dfVFS originally was named PyVFS, but that name conflicted with another project.
dfVFS is currently implemented as a Python module.
- Developed at security:forensics
- Sources inherited from project openSUSE:Factory
-
2
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Backports:SLE-15-SP4:FactoryCandidates/python-dfVFS && cd $_ - Create Badge
Source Files
| Filename | Size | Changed |
|---|---|---|
| dfvfs-20200920.tar.gz | 0079551476 75.9 MB | |
| python-dfVFS-rpmlintrc | 0000000056 56 Bytes | |
| python-dfVFS.changes | 0000006614 6.46 KB | |
| python-dfVFS.spec | 0000004667 4.56 KB |
Revision 14 (latest revision is 27)
Dominique Leuenberger (dimstar_suse)
accepted
request 858552
from
Greg Freemyer (gregfreemyer)
(revision 14)
- Update to 20200920 - Changes to make fsntfs the preferred NTFS back-end - Changes to make OS backend more error tollerant - Changes to make NTFS backend more error tollerant - Changes to OS file entry for creation time #440 and ns timestamps - Added XZ compressed stream analyzer - Added VHDX storage media image support - Changes to expose HFS+ creation time - Added fshfs back-end - examples is no longer installed into the site folder. Remove the rename statement. - add requires for libfsext, libfshfs, libluksde - updated %fdupes line to eliminate RPM warnings
Comments 0