Does Freeed support E01/L01?

82 views
Skip to first unread message

Andre Hakime Dutra

unread,
Jul 5, 2017, 9:23:40 AM7/5/17
to freediscovery
I was testing some files/images and seems that it doesn't handle E01/L01 (EnCase) or .AD1 (FTK) files.
I know that the EWF (Expert Witness Compression Format) is open-source and could be implemented into the software using the lib https://github.com/libyal/libewf.
The implementation of this support would be good to avoid changing metadata when staging information, if an unadverted user uses copy instead of robocopy (or any forensic moving tool) or an antivirus takes place, it could mess with the metadata. L01s can be used as a container to preserve this metadata.

Mark Kerzner

unread,
Jul 7, 2017, 10:06:59 AM7/7/17
to freedi...@googlegroups.com
Andre, I think it is a great suggestion. I have put it here https://github.com/shmsoft/FreeEed/issues/185

I would want to structure it as optional, because it is an LGPL license which will force the people to open source their code, and FreeEed is Apache license, which is business-friendly.

Cheers,
Mark

--
You received this message because you are subscribed to the Google Groups "freediscovery" group.
To unsubscribe from this group and stop receiving emails from it, send an email to freediscovery+unsubscribe@googlegroups.com.
To post to this group, send email to freedi...@googlegroups.com.
Visit this group at https://groups.google.com/group/freediscovery.
For more options, visit https://groups.google.com/d/optout.

Reply all
Reply to author
Forward
0 new messages