Skip to content
uses disktype to identify file system, uses fiwalk to generate DFXML files for FAT file systems, mounts FAT and HFS file systems images accordingly, runs md5deep on contents to generate DFXML and CSV manifests, unmounts, moves on to next image in the directory. hfs-diskid-med5deep.sh uses hfs2dfxml (Dietrich)
Shell
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.gitattributes
.gitignore
README
disk-img-extraction.sh
diskid-md5deep.sh
hfs-diskid-md5deep.sh

README

Jess Whyte, 2016-

*diskid-md5deep.sh*

Bash script to id filestystem type for a disk image using disktype, mounts the image accordingly (currently only hfs and vfat) and then runs md5deep +/or fiwalk. Note: fiwalk for fat filesystems runs before mounting. Can be modified to run, say, siegfried. 

*hfs-diskid-med5deep.sh*

Modification of above to work with HFS2DFXML (Dianne Dietrich - HFS2DFXML - https://github.com/cul-it/hfs2dfxml)

*disk-img-extraction.sh*

mounts .img and .iso according to disktype output, runs sf to create .csv reports (or hashdeep or fiwalk), extracts contents to an Extracted folder.

Note: assumes every img/iso is in its own directory. If they're all in one, it's going to create *one* Extracted directory and extract everything to there. 



You can’t perform that action at this time.