CarvPath (libcarvpath) is a library aimed at computer forensic tools that process disk and/or memory dump images or other large data files. The library allows the creation and manipulation of CarvPath annotations, which are a way to annotate partitions, files, alternate streams, processes etc. within a disk or memory image as a string. Entities within a CarvPath notation can be fragmented and/or nested, and allow for the expression of 'sparse' fragments within an entity. The CarvPath annotations resemble a path string in a filesystem, and thus present a basis for the interaction between computer forensics tools and the CarvPath-based user space file-system, CarvFs.
|Operating Systems||OS Independent|
Release Notes: The usage of LibCarvPath in the open computer forensics architecture (OCFA) led to the discovery of a multitude of bugs that have minor impact when using LibCarvPath on a single tool basis but that became important when scaled up. This release fixes the bugs that were found during OCFA/CarvFS integration. Further, as a result of the integration of LibCarvPath and CarvFS into OCFA, the LibCarvPath version numbers have been changed as a convenience to OCFA packaging. The changes between 1.0.0 and 2.3.0 are thus not as big as the version number may lead you to believe.
Release Notes: This version was completely re-factored, and the API is not backward compatible. The build system was moved from autotools to cmake.