Re: [Libguestfs] extract NTFS Master File Table for analysis

2016-02-19 Thread Richard W.M. Jones
On Thu, Feb 18, 2016 at 09:41:51PM +0200, noxdafox wrote: > All of this to say I'd like to add the possibility of extracting > files via their inode. This functionality has the advantage of not > requiring the FS to be mounted. Would libguestfs benefit from this? > > If so how should I proceed?

Re: [Libguestfs] extract NTFS Master File Table for analysis

2016-02-18 Thread noxdafox
On 02/02/16 21:35, Richard W.M. Jones wrote: On Tue, Feb 02, 2016 at 07:40:12PM +0200, noxdafox wrote: Greetings, I'm playing around an idea and I'd like to ask you some questions. I'd like to extract the MFT table from a disk image file. The idea is to employ it to build a sort of reverse

Re: [Libguestfs] extract NTFS Master File Table for analysis

2016-02-02 Thread Richard W.M. Jones
On Tue, Feb 02, 2016 at 07:40:12PM +0200, noxdafox wrote: > Greetings, > > I'm playing around an idea and I'd like to ask you some questions. > > I'd like to extract the MFT table from a disk image file. The idea > is to employ it to build a sort of reverse lookup table which, given > a cluster,

[Libguestfs] extract NTFS Master File Table for analysis

2016-02-02 Thread noxdafox
Greetings, I'm playing around an idea and I'd like to ask you some questions. I'd like to extract the MFT table from a disk image file. The idea is to employ it to build a sort of reverse lookup table which, given a cluster, could retrieve the corresponding file with the related metadata.