GitHub - jesswhyte/Disk-ID-md5deep: uses disktype to identify file system, uses fiwalk to generate DFXML files for FAT file systems, mounts FAT and HFS file systems images accordingly, runs md5deep on contents to generate DFXML and CSV manifests, unmounts, moves on to next image in the directory. hfs-diskid-med5deep.sh uses hfs2dfxml (Dietrich)

jesswhyte / Disk-ID-md5deep Public

Notifications You must be signed in to change notification settings
Fork 0
Star 7

uses disktype to identify file system, uses fiwalk to generate DFXML files for FAT file systems, mounts FAT and HFS file systems images accordingly, runs md5deep on contents to generate DFXML and CSV manifests, unmounts, moves on to next image in the directory. hfs-diskid-med5deep.sh uses hfs2dfxml (Dietrich)

7 stars 0 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 21 Commits
.gitattributes		.gitattributes
.gitignore		.gitignore
README		README
disk-img-extraction.sh		disk-img-extraction.sh
diskid-md5deep.sh		diskid-md5deep.sh
hfs-diskid-md5deep.sh		hfs-diskid-md5deep.sh

Repository files navigation

Jess Whyte, 2016-

*diskid-md5deep.sh*

Bash script to id filestystem type for a disk image using disktype, mounts the image accordingly (currently only hfs and vfat) and then runs md5deep +/or fiwalk. Note: fiwalk for fat filesystems runs before mounting. Can be modified to run, say, siegfried. 

*hfs-diskid-med5deep.sh*

Modification of above to work with HFS2DFXML (Dianne Dietrich - HFS2DFXML - https://github.com/cul-it/hfs2dfxml)

*disk-img-extraction.sh*

mounts .img and .iso according to disktype output, runs sf to create .csv reports (or hashdeep or fiwalk), extracts contents to an Extracted folder.

Note: assumes every img/iso is in its own directory. If they're all in one, it's going to create *one* Extracted directory and extract everything to there.