On Monday 04 April 2016 23:07:05 noxdafox wrote:
> On 04/04/16 15:15, Pino Toscano wrote:
> > On Monday 04 April 2016 14:58:35 NoxDaFox wrote:
> +
> +static int open_filesystem (const char *device,
> +TSK_IMG_INFO **img, TSK_FS_INFO **fs);
> +static
On 04/04/16 15:15, Pino Toscano wrote:
On Monday 04 April 2016 14:58:35 NoxDaFox wrote:
+
+static int open_filesystem (const char *device,
+TSK_IMG_INFO **img, TSK_FS_INFO **fs);
+static TSK_WALK_RET_ENUM fswalk_callback (TSK_FS_FILE *fsfile,
+
2016-04-04 12:48 GMT+03:00 Pino Toscano :
> On Sunday 03 April 2016 16:30:48 Matteo Cafasso wrote:
> > The internal_filesystem_walk command walks
> > through the FS structure of a disk partition
> > and returns all the files or directories
> > which could be found.
> >
> >
On Sunday 03 April 2016 16:30:48 Matteo Cafasso wrote:
> The internal_filesystem_walk command walks
> through the FS structure of a disk partition
> and returns all the files or directories
> which could be found.
>
> The command is able to retrieve information
> regarding deleted or unaccessible
The internal_filesystem_walk command walks
through the FS structure of a disk partition
and returns all the files or directories
which could be found.
The command is able to retrieve information
regarding deleted or unaccessible files as well
where other commands such as stat or find
would fail.