Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Handle Alternate Data Streams on NTFS Volumes #14

Open
flyguy62n opened this issue Apr 13, 2024 · 1 comment
Open

Handle Alternate Data Streams on NTFS Volumes #14

flyguy62n opened this issue Apr 13, 2024 · 1 comment

Comments

@flyguy62n
Copy link
Contributor

Problem

NTFS ADS can be used to write additional content into a separate stream where the file name is of the form 'file name:stream'.

User Story

As a PIIDigger user, data written to an alternate data stream should be evaluated.

Requirements

  • Identify files with an ADS.
  • Check the MIME type, encoding etc to determine if it can be processed
  • Add them to filesFound queue for later processing.

Inputs

For each file on an NTFS volume, enumerate any ADS.

Outputs

Add the ADS file name 'filename:stream' to the queue of files to be processed by the file handler

Unit Tests

Files with handleable and in-handleable ADS should be added to the 'testdata' folder.

@flyguy62n
Copy link
Contributor Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant