A framework to generate file carving test data
Woodblock – Easy File Carving Test Data Generation
- Simple configuration files based image creation for most use cases.
- Easy to use Python API for more complex requirements.
- Ground truth file in JSON format.
See the project’s GitHub Pages for the complete documentation.
Woodblock borrows most concepts from the DFRWS 2006 and 2007 challenges. As stated there, a scenario reflects a “specific situation that might occur in a real file system”. A scenario consists of files which are split into fragments. Scenarios on the other hand can be put into an image which can then used as input for the carving tool you would like to test.
The following example should clarify these concepts. Consider for example the two
These files can be split into fragments. In the example, we split file
A into two
B has not been fragmented.
If we arrange the fragments of our files, we have a scenario:
A scenario can be added to an image, which in turn can be written to disk. Or you can add another scenario to the image as shown below.
Using Woodblock, you could create the images shown above using a simple configuration file:
[general] block size = 512 seed = 123 corpus = testfiles [scenario 1] frags file1 = 2 frags file2 = 1 layout = 1.1, 2.1, 1.2 [scenario 2] frags file1 = 3 layout = 1.2, 1.1, Z, 1.3
All files possibly added to a scenario have to be stored in a directory. This directory serves as the test file corpus and has to be distributed along with Woodstock configuration files or scripts using the Woodstock API.
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
|Filename, size||File type||Python version||Upload date||Hashes|
|Filename, size woodblock-0.1.2-py3-none-any.whl (16.5 kB)||File type Wheel||Python version py3||Upload date||Hashes View hashes|
|Filename, size woodblock-0.1.2.tar.gz (12.5 kB)||File type Source||Python version None||Upload date||Hashes View hashes|
Hashes for woodblock-0.1.2-py3-none-any.whl