search for: prometheuscomput

...buntu 13.04 and Fedora 19. It also allows builds to succeed in OS X, but doesn't run hivexml for an unrelated reason. The _iconv_open symbol-not-found issue, that I thought was previously resolved (491ba0f7a761c7ffd50e0eaa4d892f78d538eb2b), resurfaced. Signed-off-by: Alex Nelson <a.nelson@prometheuscomputing.com> --- lib/handle.c | 1 - lib/hivex-internal.h | 2 ++ lib/node.c | 1 - lib/utf16.c | 1 - lib/value.c | 1 - lib/visit.c | 1 - lib/write.c | 1 - 7 files changed, 2 insertions(+), 6 deletions(-) diff --git a/lib/handle.c b/lib/hand...

...these two lines build and run on OS X 10.6 and 10.8, and Fedora 17 and 18. Unfortunately, a separate issue is revealed here in OS X, as some of the hivexml value data appears as Kanji. However, that is an issue distinct from getting the program to run. Signed-off-by: Alex Nelson <a.nelson at prometheuscomputing.com> --- configure.ac | 1 + lib/Makefile.am | 1 + 2 files changed, 2 insertions(+) diff --git a/configure.ac b/configure.ac index 0dfb995..298e6a9 100644 --- a/configure.ac +++ b/configure.ac @@ -184,6 +184,7 @@ AS_IF([test "x$with_readline" != xno], dnl For i18n. AM_GNU_GE...

Hi all, Piping in here as someone who has worked on file system and Registry differencing for a few years now. Taking diffs of a storage system is not a straightforward task. Hopefully, this message saves you some re-implementation heartache. In the forensics world, there is a tool called Fiwalk, which enumerates the contents of a file system and its metadata (with some basic data summaries,

Hi Hilko, Thanks a lot for creating this test hive! I think another thing that will trip up Registry programs is value names that include back slashes. For example, under the System hive, the key "\MountedDevices" has child values with names like "\DosDevices\C:" (the leading backslash is a part of the value name). There are many other values that include backslashes. I