summaryrefslogtreecommitdiffstats
path: root/python/dfvfs/README
diff options
context:
space:
mode:
Diffstat (limited to 'python/dfvfs/README')
-rw-r--r--python/dfvfs/README61
1 files changed, 61 insertions, 0 deletions
diff --git a/python/dfvfs/README b/python/dfvfs/README
new file mode 100644
index 0000000000..ff996037fb
--- /dev/null
+++ b/python/dfvfs/README
@@ -0,0 +1,61 @@
+dfvfs (Digital Forensics Virtual File System - python module)
+
+This package provides read-only access to file-system objects from various
+storage media types and file formats. The goal of dfVFS is to provide a generic
+interface for accessing file-system objects, for which it uses several
+back-ends that provide the actual implementation of the various storage media
+types, volume systems and file systems.
+
+Supported:
+
+ EWF (EWF-E01, EWF-Ex01, EWF-S01)
+ QCOW version 1, 2
+ Storage Media device
+ (split) Storage Media RAW
+ VHD
+ VMDK
+
+Note that at the moment differential images are not supported.
+Volume systems
+
+Supported:
+
+ APM
+ BitLocker (BDE)
+ GPT
+ MBR
+ VSS
+
+Planned:
+
+ FileVault2 (CoreStorage)
+ LDM
+ LUKS
+ Linux LVM version 1, 2
+ Software Raid
+
+File systems
+
+Supported file systems:
+
+ ext version 2, 3, 4
+ FAT
+ HFS, HFS+, HFSX
+ NTFS version 3
+ UFS version 1, 2
+
+TODO add more detail here regarding FAT and other supported FS
+Compressed stream file types
+
+Supported:
+
+ bzip2
+ gzip
+ zlib (both zlib-DEFLATE and raw-DEFLATE)
+
+Archive file types
+
+Supported:
+
+ tar
+ zip