CarvPath
CarvPath (libcarvpath) is a library aimed at computer forensic tools that process disk and/or memory dump images or other large data files. The library allows the creation and manipulation of CarvPath annotations, which are a way to annotate partitions, files, alternate streams, processes etc. within a disk or memory image as a string. Entities within a CarvPath notation can be fragmented and/or nested, and allow for the expression of 'sparse' fragments within an entity. The CarvPath annotations resemble a path string in a filesystem, and thus present a basis for the interaction between computer forensics tools and the CarvPath-based user space file-system, CarvFs.
| Tags | Forensics |
|---|---|
| Licenses | LGPLv3 |
| Operating Systems | OS Independent |
| Implementation | C |
Recent releases
- 24 Nov 2010 11:51
Release Notes: The usage of LibCarvPath in the open computer forensics architecture (OCFA) led to the discovery of a multitude of bugs that have minor impact when using LibCarvPath on a single tool basis but that became important when scaled up. This release fixes the bugs that were found during OCFA/CarvFS integration. Further, as a result of the integration of LibCarvPath and CarvFS into OCFA, the LibCarvPath version numbers have been changed as a convenience to OCFA packaging. The changes between 1.0.0 and 2.3.0 are thus not as big as the version number may lead you to believe.
- 04 Mar 2010 15:48
Release Notes: This version was completely re-factored, and the API is not backward compatible. The build system was moved from autotools to cmake.
robklpd
04 Mar 2010 07:58
Heartbeat
- Popularity Score
- 61.34
- Vitality Score
- 1.72
- Subscriptions
- 8
