Overview
This module allows users to ingest and retrieve disk images through the Islandora interface and provides disk image forensics using Sleuthkit.
Dependencies
Downloads
Release Notes and Downloads
Installation
To install Sleuthkit:
sudo apt-get install libafflib-dev afflib-tools libewf-dev ewf-tools
git clone https://github.com/sleuthkit/sleuthkit.git
cd sleuthkit
./bootstrap
./configure (no need to declare --with-afflib=dir if you installed libafflib-dev and afflib-tools as described above)
make && sudo make install && sudo ldconfig
Configuration
Set the path for fiwalk
at http://path.to.your.site/admin/islandora/solution_pack_config/disk_image.
If you would like to index the output of fiwalk
in Solr, you can use this xslt.
Content Models, Prescribed Datastreams and Forms
The Disk Image Solution Pack comes with the following objects in http://path.to.your.site/admin/islandora/solution_pack_config/solution_packs:
- Islandora Disk Image Content Model (islandora:sp_disk_image)
- Disk Image Collection (islandora:sp_disk_image_collection)
A file ingested using the Disk Image Solution Pack's content model will have the following datastreams:
RELS-EXT | Default Fedora relationship metadata |
MODS | MODS record filled out during ingest |
DC | Dublin Core record |
OBJ | Original disk image file uploaded |
TN | Default thumbnail icon for disk image objects |
The Disk Image Solution Pack comes with the Disk Image MODS form.