Overview

This module allows users to ingest and retrieve disk images through the Islandora interface and provides disk image forensics using Sleuthkit.

Dependencies

• Islandora
• Tuque

• sleuthkit

• afflib-tools

• libafflib-dev

• libewf-dev

• ewf-tools

Downloads

Release Notes and Downloads

Installation

To install Sleuthkit:

sudo apt-get install libafflib-dev afflib-tools libewf-dev ewf-tools
git clone https://github.com/sleuthkit/sleuthkit.git
cd sleuthkit
./bootstrap
./configure (no need to declare --with-afflib=dir if you installed libafflib-dev and afflib-tools as described above)
 make && sudo make install && sudo ldconfig

Configuration

Set the path for fiwalk  at http://path.to.your.site/admin/islandora/solution_pack_config/disk_image.

 If you would like to index the output of fiwalk in Solr, you can use this xslt.

Content Models, Prescribed Datastreams and Forms

The Disk Image Solution Pack comes with the following objects in http://path.to.your.site/admin/islandora/solution_pack_config/solution_packs:

• Islandora Disk Image Content Model (islandora:sp_disk_image)
• Disk Image Collection (islandora:sp_disk_image_collection)

A file ingested using the Disk Image Solution Pack's content model will have the following datastreams:

The Disk Image Solution Pack comes with the Disk Image MODS form.