libewf: add support to write EWF-L01 and EWF2-Lx01

[joachimmetz]

Given that the the L01 format is not forensically sound (as in it does not allow preservation of the original data without potential modification, for more details see: https://osdfir.blogspot.com/2023/07/whats-in-file-path.html) this would need be accompanied with additional safe guards, such as a log containing any alteration necessary

[tomse]

👍 for this feature

[SmartBulb67]

I also still hope this feature will be added. Especially interested in creating Lx01 files.
Any kind of official sponsoring possible here?

[joachimmetz]

@SmartBulb67 the best sponsoring is in the form of PRs (code contributions), research and test files. There is research to be done to know more about the L01 and Lx01 formats given different file systems and operating system conditions and different versions of Encase.

[joachimmetz]

L01 and Lx01 are not forensically sound also see https://osdfir.blogspot.com/2023/07/whats-in-file-path.html