Provides tools to analyze disks on byte level
Project description
Description
Provides tools to analyze disks on byte level
Available Tools
-
Master Boot Record Examiner
- Provides information and analysis of MBR
-
FAT Examiner
- Provides information and analysis of:
- FAT VBR
- FAT FSInfo
- FAT Directory Entry
- FAT Long Filename
- Provides information and analysis of:
Under Construction
- Disk Usage Information
- Overview of disk space usage based on MBR information
Future Tools
-
Extended Partition Analyser
- Examines extended parititions
-
File System Analyser
- ext
- NTFS
Installation
pip install disk_detective
Usage
From command line:
python -m disk_detective --path PATH --mode {mbr,structure,fat-vbr,fat-fsinfo,fat-lfn,fat-dir-entry} [--offset OFFSET]
Option | Short | Type | Default | Description |
---|---|---|---|---|
--path | -p | String | - | Path to file (dd, raw) or path to disk (\.\PhysicalDrive0, /dev/sda, /dev/disk1) |
--mode | -p | String | - | mbr = Examines the MBR usage = Overview of disk space usage fat-vbr = Examines FAT VBR fat-fsinfo = Examines FAT FSInfo fat-lfn = Examines Long Filename Entries fat-dir-entry = Examines Directory Entries |
--offset | -o | Int | - | The offset in bytes to start reading |
Example
Output for mode == mbr
python -m disk_detective -p path/to/example.dd -m mbr
Please find the result here
Output for mode == fat-vbr
python -m disk_detective -p path/to/example.dd -m fat-vbr -o 1048576
Please find the result here
Output for mode == fat-fsinfo
python -m disk_detective -p path/to/example.dd -m fat-fsinfo -o 1049088
Please find the result here
Output for mode == fat-lfn
python -m disk_detective -p path/to/example.dd -m fat-lfn
Please find the result here
Output for mode == fat-dir-entry
python -m disk_detective -p path/to/example.dd -m fat-dir-entry
Please find the result here
License
MIT
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for disk_detective-0.4.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 34cb89319cfb6c52dc5cf64de5ff81e97bc8432377baf406588b90547b6eb30c |
|
MD5 | 510a662933f08d1fe7f307e40c949391 |
|
BLAKE2b-256 | 71941352c20a1de258c0a2d37a3bb46bbadb9e388d31c6829d156f1c74c402ea |