[sleuthkit-announce] TSK 3.0.0 and Autopsy 2.20 are available
Brought to you by:
carrier
From: Brian C. <ca...@sl...> - 2008-10-19 22:57:28
|
This major release of TSK contains many new library and tool features. * Orphan files (deleted files that have a metadata structure, but do not have a parent directory that can be reached from the root directory) are now shown in the $OrphanFiles directory. * The FAT file system MBR and File Allocation Tables are now accessible as files in the root directory. * More deleted files are shown in each directory when using 'fls' (and the corresponding library API). This used to require running 'ifind -p' for each directory and it is now done automatically. * New mmcat tool to output contents of a single volume. * New mmls flags to list only specific volumes. * Backup FAT MBRs are used, if the primary is corrupt. * d* tools (dls, dcat, etc.) are now named blk* (blkls, blkcat, etc.) * New '-b' option in sorter to specify minimum file size. * Added mingw support for cross compiling * New library APIs and docs that do not require a callback design * Minor bug fixes. The Autopsy release contains updates to handle the new TSK features and has some minor bug fixes. http://www.sleuthkit.org/ brian |