The filesystem_walk API parses the FS internals of a partition and returns a list of all
the files and directories contained within. It list deleted files and directories as
well.
For each node, it reports its relative path, its inode and its allocation status.
This is the end user API for inspecting a disk partition content.
The command can handle filenames with special characters.
Example Use Cases:
* inspect the FS content to see which deleted files could be possibly retrieved.
* quickly check the FS content without mounting the disk
* get a full mapping inode -> filepath of the disk
Matteo Cafasso (2):
added filesystem_walk API
added filesystem_walk API tests
generator/actions.ml | 13 +++
src/Makefile.am | 1 +
src/tsk.c | 194 ++++++++++++++++++++++++++++++++++++++
tests/tsk/Makefile.am | 3 +-
tests/tsk/test-filesystem-walk.sh | 48 ++++++++++
5 files changed, 258 insertions(+), 1 deletion(-)
create mode 100644 src/tsk.c
create mode 100755 tests/tsk/test-filesystem-walk.sh
--
2.8.0.rc3