v2:
- Rebase on top of master
Matteo Cafasso (2):
New API: download_blocks
Added download_blocks API test
daemon/sleuthkit.c| 41 ++-
generator/actions.ml | 24
gobject/Makefile.inc | 2 ++
src/MAX_PROC_NR
This function allows to download file system data units (blocks) from
the given partition.
The API can be used to detect data hidden within filesystem bad blocks
or slack space.
Moreover for filesystems such as Ext3 and Ext4, this function is the
only way to retrieve deleted files. An example is
The test shows how the function can be used to retrieve deleted data
from a disk partition.
Signed-off-by: Matteo Cafasso
---
tests/tsk/Makefile.am | 1 +
tests/tsk/test-download-blocks.sh | 58 +++
2 files changed, 59