Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve NTFS support #316

Open
joachimmetz opened this issue Aug 30, 2015 · 5 comments

Comments

@joachimmetz
Copy link
Member

commented Aug 30, 2015

1.4 Release

Proposed for 1.6 release

  • Parse attributes
  • Parse security descriptors
  • $MFT parser add "full path hints"
  • Parse $I30 streams
  • Parse $Logfile
    • use libfsntfs
    • needs more research
  • Distributed link tracking support
    • NTFS file stat
  • Aftercare
    • split off file entry functionality of parser mediator
    • change 'fs:stat:ntfs' into 'fs:ntfs:stat'
  • make libfsntfs the default
    • have end-to-end comparison testing
  • parsing of stand-alone USN change journal

@joachimmetz joachimmetz self-assigned this Aug 30, 2015

joachimmetz added a commit that referenced this issue Sep 3, 2015

@joachimmetz joachimmetz added this to the 1.4 release milestone Sep 7, 2015

joachimmetz added a commit that referenced this issue Sep 23, 2015

joachimmetz added a commit that referenced this issue Sep 29, 2015

joachimmetz added a commit to joachimmetz/plaso that referenced this issue Nov 4, 2015

joachimmetz added a commit to joachimmetz/plaso that referenced this issue Nov 4, 2015

@joachimmetz joachimmetz referenced this issue Nov 4, 2015
2 of 2 tasks complete

joachimmetz added a commit to joachimmetz/plaso that referenced this issue Nov 5, 2015

joachimmetz added a commit to joachimmetz/plaso that referenced this issue Nov 30, 2015

joachimmetz added a commit to joachimmetz/plaso that referenced this issue Dec 1, 2015

joachimmetz added a commit to joachimmetz/plaso that referenced this issue Dec 1, 2015

joachimmetz added a commit to joachimmetz/plaso that referenced this issue Dec 1, 2015

joachimmetz added a commit to joachimmetz/plaso that referenced this issue Dec 5, 2015

joachimmetz added a commit to joachimmetz/plaso that referenced this issue Dec 8, 2015

joachimmetz added a commit that referenced this issue Dec 8, 2015

@joachimmetz joachimmetz modified the milestones: 1.5 release, 1.4 release Dec 8, 2015

@joachimmetz

This comment has been minimized.

Copy link
Member Author

commented Dec 8, 2015

1.4 release items finished, moving to 1.5

@joachimmetz joachimmetz modified the milestones: 1.6.0 release, 1.5.0 release Jun 30, 2016

joachimmetz added a commit to joachimmetz/plaso that referenced this issue Jul 4, 2016

@joachimmetz joachimmetz referenced this issue Aug 9, 2016
2 of 4 tasks complete

joachimmetz added a commit to joachimmetz/plaso that referenced this issue Sep 24, 2016

@joachimmetz joachimmetz modified the milestones: 2017 Q4 release, 2017 Q3 release Aug 4, 2017

@joachimmetz

This comment has been minimized.

Copy link
Member Author

commented Aug 4, 2017

bumped milestone this will require more work

@Onager

This comment has been minimized.

Copy link
Contributor

commented Sep 19, 2018

Not going to make release, removing milestone.

Please do not re-assign to a milestone until this issue has been cleaned up.

@Onager Onager removed this from the 2018 September release milestone Sep 19, 2018

@MariasStory

This comment has been minimized.

Copy link

commented Jan 9, 2019

What about the "full path hints"?

@joachimmetz joachimmetz added this to the 2019 July release milestone Jun 12, 2019

@stbe stbe referenced this issue Jul 8, 2019
1 of 3 tasks complete

@Onager Onager removed this from the 2019 August release milestone Aug 23, 2019

@Onager

This comment has been minimized.

Copy link
Contributor

commented Aug 23, 2019

Please do not re-assign to a milestone until this issue has been cleaned up.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
3 participants
You can’t perform that action at this time.