Many hyperlinks are disabled.
Use anonymous login
to enable hyperlinks.
50 most recent check-ins
|
2025-11-13
| ||
| 14:22 | code cleanup of old propertytemplate code Leaf check-in: 9e118991e8 user: pasquale tags: main, origin/v0.1, trunk | |
| 14:19 | got basic for phone/ad1 properties, implemented aff4, and cleaned up propertytemplates.h map for easier access and modification check-in: 45b4c35f0c user: pasquale tags: main, origin/v0.1, trunk | |
| 13:49 | added aff4 properties. check-in: b778bc1d60 user: pasquale tags: main, origin/v0.1, trunk | |
| 12:51 | fixed manageevidence when a case is open and new/open a case. added some aff4 properties check-in: 8e328d1920 user: pasquale tags: main, origin/v0.1, trunk | |
| 12:43 | working on testing aff4 property values, then i can figure out to put them in the tool vs the command line debug statements. check-in: 7096c88a79 user: pasquale tags: main, origin/v0.1, trunk | |
| 12:26 | fixed some code issues for phdi check-in: 75c58883a7 user: pasquale tags: main, origin/v0.1, trunk | |
| 12:08 | added phdimg check-in: c9a7c8f878 user: pasquale tags: main, origin/v0.1, trunk | |
|
2025-11-12
| ||
| 17:59 | working on phd next. check-in: 72c9aef2ea user: pasquale tags: main, origin/v0.1, trunk | |
| 17:41 | fixed logic for determining the pt file to use, as well as implemented wfi properties. on to phd next. check-in: e73299b7b0 user: pasquale tags: main, origin/v0.1, trunk | |
| 13:47 | fixed burrow when starting a new or open case while a case is already open. check-in: 18ac6901cb user: pasquale tags: main, origin/v0.1, trunk | |
| 13:37 | qcow header was checking out for sfs, so moved sfs up in the propviewer forensic image check ahead of qcow. check-in: 430aeea386 user: pasquale tags: main, origin/v0.1, trunk | |
| 12:20 | working on issues with sfsimg properties crashing for vector size check-in: 555285b005 user: pasquale tags: main, origin/v0.1, trunk | |
|
2025-11-10
| ||
| 17:29 | working on sfs properties. check-in: bf04e67ecb user: pasquale tags: main, origin/v0.1, trunk | |
| 17:06 | got initial properties for affv3 check-in: 7b0f1b6760 user: pasquale tags: main, origin/v0.1, trunk | |
| 16:19 | added afflibv3 support. still need to add properties for it as well as the other forensic images check-in: c706059fbc user: pasquale tags: main, origin/v0.1, trunk | |
| 15:49 | working on forensic image properties and adding affv3 support check-in: 8e5b15ca89 user: pasquale tags: main, origin/v0.1, trunk | |
| 13:59 | attempting to simplify some of the forensic image properties function check-in: d4800b4a72 user: pasquale tags: main, origin/v0.1, trunk | |
|
2025-11-07
| ||
| 17:40 | fixed directory listing for initial directory selection. also added another categorysignature check for plain text that might be mistaken for binary using extension and ascii vs non-ascii characters. check-in: 228138ff88 user: pasquale tags: main, origin/v0.1, trunk | |
| 16:56 | fixed blank directory button for directories in the path frame. also fixed the crashing for a non empty tmp directory from a previous crash. also fixed burrow being displayed on new case/open case. check-in: f360f63a37 user: pasquale tags: main, origin/v0.1, trunk | |
| 15:43 | working on fixing pathframe for directories check-in: 7d0db5488d user: pasquale tags: main, origin/v0.1, trunk | |
| 15:22 | commented out debug messages for partitions, fixed closing case and clearing the pathframe, plaintext, tablelist prior to opening a new case. in case of errors, clean up tmp folder on program re-open so it won't crash with unable to rm tmp files check-in: 5971dc6553 user: pasquale tags: main, origin/v0.1, trunk | |
| 13:43 | fixed an issue with partition logic where it was creating a duplicate unallocated partition for an windows fs with no partitions. working on cleaning up artifact parser code and adding additional parsers check-in: 9af35474b6 user: pasquale tags: main, origin/v0.1, trunk | |
|
2025-11-06
| ||
| 21:58 | added regf license, and implemented launching file with binaries as well as selecting one on hte fly with openwith and adding it to the list. check-in: a88ca3ab9f user: pasquale tags: main, origin/v0.1, trunk | |
| 19:49 | added missing icons and other files for compilation check-in: e280b15534 user: pasquale tags: main, origin/v0.1, trunk | |
| 18:04 | working on forimg properties for the forimg types i haven't done yet. check-in: 51aa3bb40d user: pasquale tags: main, origin/v0.1, trunk | |
| 17:37 | removed comments and will have to test fs's and partition's as i go check-in: 00d8309ed0 user: pasquale tags: main, origin/v0.1, trunk | |
| 17:36 | probably fixed fat12, fat16, cleaned up code for fat32, and will have to test exfat check-in: 8eee1a3d99 user: pasquale tags: main, origin/v0.1, trunk | |
| 17:02 | fixed properties for unallocated partitions. working on fixing loading file system from mbr parititon table forensic image check-in: 538ad8c612 user: pasquale tags: main, origin/v0.1, trunk | |
| 16:33 | partitions are working again. filesystems still aren't showing up for fat16 from the partitions and properties for unallocated crash, but filesystem properties work. check-in: c5d1014e3c user: pasquale tags: main, origin/v0.1, trunk | |
| 15:51 | initial rewrite runthrough doesn't crash, but it only finds 4 out of 10 partitions, allocated and unallocated. check-in: 7d606c571b user: pasquale tags: main, origin/v0.1, trunk | |
| 15:01 | have parsing gpt, getfilesystemname, and getvolumeproperties left to redo for partitions. check-in: 83f1d2721f user: pasquale tags: main, origin/v0.1, trunk | |
|
2025-11-05
| ||
| 18:43 | working on implementing partition mapping redesign check-in: f110b8de36 user: pasquale tags: main, origin/v0.1, trunk | |
| 17:58 | working on computing and recording the partitions check-in: 7eef31a415 user: pasquale tags: main, origin/v0.1, trunk | |
| 15:28 | working on redoing partition functionality to be read from image once, then read from the files at subsequent openings so it is faster. check-in: a1d584b62e user: pasquale tags: main, origin/v0.1, trunk | |
| 14:49 | working on redoing partition processing check-in: c3bc8e1e60 user: pasquale tags: main, origin/v0.1, trunk | |
|
2025-11-04
| ||
| 16:48 | working on redoing partition parsing check-in: a372a2a231 user: pasquale tags: main, origin/v0.1, trunk | |
| 16:44 | working on redoing partitions code so it is more efficient, easier to read and will uses file info rather than parse the partitions if it exists, similar to the ReadDirectory code check-in: 97e1b643e8 user: pasquale tags: main, origin/v0.1, trunk | |
| 15:59 | need to fix or rework partition mapping along with properties so it matches check-in: 7a8b493caa user: pasquale tags: main, origin/v0.1, trunk | |
| 15:30 | extended doesn't appear to get the volprops, not sure why it doesn't work a bunch and then works a few times later.... but still won't parse the fs files either. so need to figure it out and start from the beginning of parsing partitions. check-in: d15dfbd502 user: pasquale tags: main, origin/v0.1, trunk | |
|
2025-11-03
| ||
| 16:57 | got export to pdf working to include highlighting links and clickable relative path links. check-in: f890a96fdc user: pasquale tags: main, origin/v0.1, trunk | |
| 14:34 | added pdf export using libharu. i can only get links as absolute rather than relative, so linking is not worth it right now. check-in: d499ba0b2e user: pasquale tags: main, origin/v0.1, trunk | |
|
2025-10-29
| ||
| 14:50 | got sfs working for any named raw image inside the sfs container. will clean up code at a later date, once i test it more thoroughly check-in: 9ae40f2c3e user: pasquale tags: main, origin/v0.1, trunk | |
| 12:54 | fixed sfs reading. need to fix the hardcoded raw forensic image name image.raw so it will figure out which file is the forensic image and read that. this is because if i build an sfs image myself, i use dc3dd,b3sum and then mksquashfs and my image name is the same as the sfs image name, i.e. 1B1.sfs, 1B1.dd check-in: 260fa4ae1c user: pasquale tags: main, origin/v0.1, trunk | |
| 11:51 | trying to fix sfs file processing for large files check-in: 1f90761e74 user: pasquale tags: main, origin/v0.1, trunk | |
| 11:49 | sfs works for small files, but not for large files... need to figure out where the issue is, which is probably the blocks to read logic, which is close but not quite working. check-in: fcf50a8e70 user: pasquale tags: main, origin/v0.1, trunk | |
| 11:38 | fixed root directory parsing for sfs, working on fixing sfs readcontent for GetFileContent() check-in: b6dcc20f9c user: pasquale tags: main, origin/v0.1, trunk | |
| 11:15 | converted directories if's to if/else to maybe save time, did the same for partitions. still need to fix sfs, but fixed this while i was thinking about it. check-in: d5396005f7 user: pasquale tags: main, origin/v0.1, trunk | |
| 10:41 | fixed more of sfs parsing. issues with root directory listing failing, so need to trace and fix. check-in: 69dacfb07b user: pasquale tags: main, origin/v0.1, trunk | |
| 10:33 | still an issue with sfs file reading... check-in: 0b4eb51590 user: pasquale tags: main, origin/v0.1, trunk | |
|
2025-10-28
| ||
| 15:07 | modified pdf to parse all pages rather than 1st page. check-in: 712c1974c9 user: pasquale tags: main, origin/v0.1, trunk | |