Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support NTFS compression #18

Open
puffyCid opened this issue May 19, 2023 · 0 comments
Open

Support NTFS compression #18

puffyCid opened this issue May 19, 2023 · 0 comments
Labels
enhancement New feature or request Windows Issue related to Windows

Comments

@puffyCid
Copy link
Owner

puffyCid commented May 19, 2023

What new feature do you think would be cool to add to artemis?
Currently artemis just labels files that are compressed with the builtin NTFS compression types. It would be cool if it could decompress the data.
This is primarily useful when hashing files and reporting file sizes.

Describe the solution you'd like
Support decompressing NTFS compressed files. Might be dependent/solvable by #6

Additional context
NTFS compressed files are kind of finicky to deal with. For example, if explorer.exe is compressed with the builtin NTFS compression and we want to answer the question "How big is the file?". Do we want the compressed size or decompressed size? But if someone copies the file to a different location/drive, Windows decompresses the file and now the size is different.

NTFS: https://en.wikipedia.org/wiki/NTFS (File Compression)
libyal: https://github.com/libyal/libfsntfs/blob/main/documentation/New%20Technologies%20File%20System%20(NTFS).asciidoc#9-compression

@puffyCid puffyCid added enhancement New feature or request Windows Issue related to Windows labels May 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request Windows Issue related to Windows
Projects
None yet
Development

No branches or pull requests

1 participant