Brian's TSK TODO List
CVS Date: $Date: 2006/12/15 15:52:23 $
========================================================================

Investigate the assignment of FS_INODE.flags -- is it ever used -- does it
duplicate the data in he inode_walk callbacks.  What should we do with FS_DENT
-- a similar thing?

Make nossl option

make ifind more library friendly by not printing all results
Change istat and fsstat to print to strings instead of FILE


mmstat man page to HTML
make '-S' option for icat that outputs only slack space (Wyatt)
Clean up header files so that they are easier to include as a library

Windows version does not do globbing of cmd line arguments

Make return codes when opening a FS differentiate between not being a file
system and being a corrupt file system (for a more accurate error message)

Make data_buf_alloc accept 64-bit number as argument for size. 
Change dcat so that it does not read all data at once. 

=========================================================================
                         GENERAL
=========================================================================
- Convert docs to docbook?


=========================================================================
                      DISK TOOLS
=========================================================================
- diskstat: Use 48-bit commands -- support USB / Firewire devices
- Add DCO detection


=========================================================================
                         FILE SYSTEM
=========================================================================
GENERAL:
- SQL Patch
- fsstat
  - stats on number of things free
  - UNIX bitmaps per group 
  - List bad blocks (done for FAT)
- New line of 'f' tools that utilize 'ifind' code:
  - fstat (istat from path)
  - fcat
- Need jfind code to find entries based on FS block number
- Use backup copy of boot sector if primary fails.
- output data of ils
- Incorporate the FS_FLAG_DATA_BAD flag into operation
- Incorporate HFS


---------------------------------------------------------------
FAT: 
- Running ffind on a lfn FAT directory entry results in an "ORPHAN"
entry because the LFN entries are not sent via inode_walk...  perhaps
make a new flag or a special FAT function. (BUG: 1326007)
- could add a check to alert a file that has VOL_NAME set in non-root dir
- Maybe fatfs_dent_walk should only check the times for the first
entry and not be so strict.  0's can be used if the time is invalid.


---------------------------------------------------------------
FFS:
- HP Support
- Display disk labels in fsstat

---------------------------------------------------------------
EXTxFS:

---------------------------------------------------------------
NTFS: 
- Make (realloc) appear on NTFS because of sequence numbers being off....
- figure out a better way that $BADCLUS does not screw things up
if it has a value in the first run.
- deleted ADS
- Read the Security Attributes
- BAAD 
- when doing a timeline in NTFS: do three time machine entries:
  - time in parent directory
  - time in STD_INFO
  - time in $FNAME

---------------------------------------------------------------
UFS:



=========================================================================
                         HASH TOOLS
=========================================================================
- hls
- extended output for NSRL 


=========================================================================
                         IMAGE LAYER
=========================================================================

- need an img_integ tool that will verify the ingetrigy of an image
 (will require the hash to be passed for raw and split files)


=========================================================================
                      MEDIA MANAGEMENT
=========================================================================
- Add status flags to mac mmls
- Add bootable flag to mm code for DOS
- mmls in recursive does not always print location relative to start
of disk i.e. intel solaris disk offsets are relative to start of
solaris partition and not disk - should this be modified?
- add sanity checks based on image size to determine if values are valid


=========================================================================
                         SEARCHING
=========================================================================
- indexing
- sstrings and Locale:
  http://lidn.sourceforge.net/articles/unicode_programming/l-linuni.html
- Incorporate grep or basic regexp to search files


=========================================================================
                         SORTER
=========================================================================
- minimum size for files
- add extension to files that do not have one based on their file type.
- check for ADS of 'dead' NTFS files from ils
- should filter through the ils and fls entries so that only one
entry for each unallocated file is shown.


=========================================================================
                         TIMELINES
=========================================================================
- scripts to incorporate logs and such into mactime
- make 'mactime' able to run with '-w'
- simplify date code with 'mactime' and get rid of the library
- should filter through the ils and fls entries so that only one
entry for each unallocated file is shown.
- comma delimited version should have seperate column for deleted status
(suggested by Keith Wood)

