Difference between revisions of "Load"

From truxwiki.com
Jump to navigation Jump to search
Line 30: Line 30:
  
 
The following file systems are supported
 
The following file systems are supported
* [https://en.wikipedia.org/wiki/Ext2 ext2]
+
* [https://en.wikipedia.org/wiki/Ext2 ext2] - Linux ext2/3/4
* [https://en.wikipedia.org/wiki/File_Allocation_Table FAT]
+
* [https://en.wikipedia.org/wiki/File_Allocation_Table FAT] - Microsoft FAT12/16/32/ex
* [https://en.wikipedia.org/wiki/HFS_Plus HFS]
+
* [https://en.wikipedia.org/wiki/HFS_Plus HFS] - HFS/HFS+
* [https://en.wikipedia.org/wiki/ISO_9660 ISO 9660]
+
* [https://en.wikipedia.org/wiki/ISO_9660 ISO 9660] - CD/DVD
* [https://en.wikipedia.org/wiki/NTFS NTFS]
+
* [https://en.wikipedia.org/wiki/NTFS NTFS] - Microsoft NTFS
* [https://en.wikipedia.org/wiki/Unix_File_System UFS]
+
* [https://en.wikipedia.org/wiki/Unix_File_System UFS] - UFS1/UFS2
* [https://en.wikipedia.org/wiki/YAFFS YAFFS]
+
* [https://en.wikipedia.org/wiki/YAFFS YAFFS] - Yet Another Flash File System

Revision as of 09:34, 22 July 2020

Details
Executable Load.exe
Stage 1
Percent Complete 48%
Message Queue loadq

Load's purpose in life is to find files, identify their type, eliminate their contents based on known-good MD5 hashes, put the meta-data about the file into a database, contents into a depot, then send messages to other ETL processes that have registered to receive that type of file.

Usage

load.exe T:\Bob.E01

Capabilities

Load can ingest the files and folders. If the file is one of the following disk image formats, it will be opened, partitions and filesystems navigated, freespace gathered, files carved, etc.

  • Raw (dd)
  • E01 - Expert Witness Disk Image
  • L01 - Expert Witness Logical Files
  • ISO - CD/DVD disc image

The following file systems are supported

  • ext2 - Linux ext2/3/4
  • FAT - Microsoft FAT12/16/32/ex
  • HFS - HFS/HFS+
  • ISO 9660 - CD/DVD
  • NTFS - Microsoft NTFS
  • UFS - UFS1/UFS2
  • YAFFS - Yet Another Flash File System