1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147
|
Brian's TSK TODO List
CVS Date: $Date: 2006/09/01 14:33:35 $
========================================================================
mmstat man page to HTML
make '-S' option for icat that outputs only slack space (Wyatt)
Clean up header files so that they are easier to include as a library
Need to have a sanity check for FAT to look for loops when following the FAT
-- determinging directory size and file walking...
fix bug where a FAT directory that points to itself is an infinite loop...
Windows version does not do globbing of cmd line arguments
ORPHAN FLAG to ifind
Make a _DATA_ flag that identifies if the data is sparse (used only for
file walk on non-FAT)
=========================================================================
GENERAL
=========================================================================
- Convert docs to docbook?
=========================================================================
DISK TOOLS
=========================================================================
- diskstat: Use 48-bit commands -- support USB / Firewire devices
- Add DCO detection
=========================================================================
FILE SYSTEM
=========================================================================
GENERAL:
- SQL Patch
- fsstat
- stats on number of things free
- UNIX bitmaps per group
- List bad blocks (done for FAT)
- New line of 'f' tools that utilize 'ifind' code:
- fstat (istat from path)
- fcat
- Need jfind code to find entries based on FS block number
- Use backup copy of boot sector if primary fails.
- output data of ils
- Incorporate the FS_FLAG_DATA_BAD flag into operation
- Make flag in dls to extract only allocated.
- Incorporate HFS
---------------------------------------------------------------
FAT:
- Running ffind on a lfn FAT directory entry results in an "ORPHAN"
entry because the LFN entries are not sent via inode_walk... perhaps
make a new flag or a special FAT function. (BUG: 1326007)
- could add a check to alert a file that has VOL_NAME set in non-root dir
- Maybe fatfs_dent_walk should only check the times for the first
entry and not be so strict. 0's can be used if the time is invalid.
---------------------------------------------------------------
FFS:
- HP Support
- Display disk labels in fsstat
---------------------------------------------------------------
EXTxFS:
---------------------------------------------------------------
NTFS:
- Make (realloc) appear on NTFS because of sequence numbers being off....
- figure out a better way that $BADCLUS does not screw things up
if it has a value in the first run.
- deleted ADS
- Read the Security Attributes
- BAAD
- when doing a timeline in NTFS: do three time machine entries:
- time in parent directory
- time in STD_INFO
- time in $FNAME
- Compressed attributes...
---------------------------------------------------------------
UFS:
=========================================================================
HASH TOOLS
=========================================================================
- hls
- extended output for NSRL
=========================================================================
IMAGE LAYER
=========================================================================
- need an img_integ tool that will verify the ingetrigy of an image
(will require the hash to be passed for raw and split files)
=========================================================================
MEDIA MANAGEMENT
=========================================================================
- Add status flags to mac mmls
- Add bootable flag to mm code for DOS
- mmls in recursive does not always print location relative to start
of disk i.e. intel solaris disk offsets are relative to start of
solaris partition and not disk - should this be modified?
- show unpartitioned area at end of disk (using size from img)
- add sanity checks based on image size to determine if values are valid
=========================================================================
SEARCHING
=========================================================================
- indexing
- sstrings and Locale:
http://lidn.sourceforge.net/articles/unicode_programming/l-linuni.html
- Incorporate grep or basic regexp to search files
=========================================================================
SORTER
=========================================================================
- minimum size for files
- add extension to files that do not have one based on their file type.
- check for ADS of 'dead' NTFS files from ils
- should filter through the ils and fls entries so that only one
entry for each unallocated file is shown.
=========================================================================
TIMELINES
=========================================================================
- scripts to incorporate logs and such into mactime
- make 'mactime' able to run with '-w'
- simplify date code with 'mactime' and get rid of the library
- should filter through the ils and fls entries so that only one
entry for each unallocated file is shown.
- comma delimited version should have seperate column for deleted status
(suggested by Keith Wood)
|