summaryrefslogtreecommitdiff
path: root/python/dfvfs/README
diff options
context:
space:
mode:
authorBarry J. Grundy <bgrundyatlinuxleo.com>2014-12-24 15:37:49 -0600
committerRobby Workman <rworkman@slackbuilds.org>2014-12-25 02:10:29 -0600
commit381b9c04e650c1d2f4d2d1cd5ea0ded77ebfb9ad (patch)
tree066208804340fda93eb4192fd156c487d5b73b7e /python/dfvfs/README
parenteedf36be340806875087b07e04f824f1d9391db7 (diff)
downloadslackbuilds-381b9c04e650c1d2f4d2d1cd5ea0ded77ebfb9ad.tar.gz
python/dfvfs: Added (Digital Forensics Virtual File System)
Signed-off-by: Robby Workman <rworkman@slackbuilds.org>
Diffstat (limited to 'python/dfvfs/README')
-rw-r--r--python/dfvfs/README61
1 files changed, 61 insertions, 0 deletions
diff --git a/python/dfvfs/README b/python/dfvfs/README
new file mode 100644
index 0000000000..ff996037fb
--- /dev/null
+++ b/python/dfvfs/README
@@ -0,0 +1,61 @@
+dfvfs (Digital Forensics Virtual File System - python module)
+
+This package provides read-only access to file-system objects from various
+storage media types and file formats. The goal of dfVFS is to provide a generic
+interface for accessing file-system objects, for which it uses several
+back-ends that provide the actual implementation of the various storage media
+types, volume systems and file systems.
+
+Supported:
+
+ EWF (EWF-E01, EWF-Ex01, EWF-S01)
+ QCOW version 1, 2
+ Storage Media device
+ (split) Storage Media RAW
+ VHD
+ VMDK
+
+Note that at the moment differential images are not supported.
+Volume systems
+
+Supported:
+
+ APM
+ BitLocker (BDE)
+ GPT
+ MBR
+ VSS
+
+Planned:
+
+ FileVault2 (CoreStorage)
+ LDM
+ LUKS
+ Linux LVM version 1, 2
+ Software Raid
+
+File systems
+
+Supported file systems:
+
+ ext version 2, 3, 4
+ FAT
+ HFS, HFS+, HFSX
+ NTFS version 3
+ UFS version 1, 2
+
+TODO add more detail here regarding FAT and other supported FS
+Compressed stream file types
+
+Supported:
+
+ bzip2
+ gzip
+ zlib (both zlib-DEFLATE and raw-DEFLATE)
+
+Archive file types
+
+Supported:
+
+ tar
+ zip