Difference between pages "Dfvfs" and "Master boot record"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
(Volume systems)
 
 
Line 1: Line 1:
{{Infobox_Software |
+
{{Expand}}
  name = dfvfs |
+
The '''Master Boot Record''' ('''MBR''') is the first 512-byte sector on a hard drive. It should contain information necessary to boot a computer.
  maintainer = [[Kristinn Gudjonsson]], [[Joachim Metz]] |
+
  os = [[Linux]], [[Mac OS X]], [[Windows]] |
+
  genre = {{Analysis}} |
+
  license = {{APL}} |
+
  website = [https://code.google.com/p/dfvfs/ code.google.com/p/dfvfs/] |
+
}}
+
  
dfVFS, or Digital Forensics Virtual File System, provides read-only access to file-system objects from various storage media types and file formats. The goal of dfVFS is to provide a generic interface for accessing file-system objects, for which it uses several back-ends that provide the actual implementation of the various storage media types, volume systems and file systems.
+
== External Links ==
 +
* [http://en.wikipedia.org/wiki/Master_boot_record Wikipedia: Master Boot Record]
  
dfVFS is currently implemented as a Python module.
+
[[Category:Volume Systems]]
 
+
== Supported Formats ==
+
=== Storage media types ===
+
* [[Encase image file format]] or EWF (EWF-E01, EWF-Ex01, EWF-S01) using [[libewf]]
+
* [[Raw Image Format]] or RAW
+
* [[QCOW Image Format]] or QCOW using [[libqcow]]
+
* [[Virtual Disk Image (VDI)]] or VHD using [[libvhdi]]
+
 
+
=== Volume systems ===
+
* using [[sleuthkit]] and [[pytsk]]
+
** [[APM]]
+
** [[GPT]]
+
** [[MBR]]
+
* [[Windows Shadow Volumes]] or VSS using [[libvshadow]]
+
 
+
=== File systems ===
+
* using [[sleuthkit]] and [[pytsk]]
+
** [[Extended File System (Ext)]] version 2, 3, 4
+
** [[FAT]]
+
** [[HFS+|HFS, HFS+, HFSX]]
+
** [[New Technology File System (NTFS)]] version 3
+
** [[Unix File System (UFS)]] version 1, 2
+
 
+
== History ==
+
dfVFS originates from the [[plaso|Plaso project]]. It was largely rewritten and made into a stand-alone project to provide more flexibility and allow other projects to make use of the VFS functionality. dfVFS originally was named PyVFS, but that name conflicted with another project.
+
 
+
== See Also ==
+
* [[plaso]]
+
 
+
== External Links ==
+
* [https://code.google.com/p/dfvfs/ Project site]
+

Latest revision as of 02:48, 2 January 2014

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

The Master Boot Record (MBR) is the first 512-byte sector on a hard drive. It should contain information necessary to boot a computer.

External Links