[sleuthkit-announce] TSK 3.2.0 is available
Brought to you by:
carrier
|
From: Brian C. <ca...@sl...> - 2010-10-29 04:24:18
|
3.2.0 is available for download. Lots of new features and a few bug fixes.Thanks to Anthony Lawrence for help with the new features.
http://www.sleuthkit.org/sleuthkit/
New features include:
• New tsk_recover tool that extracts files from an image to a local directory.
• New tsk_loaddb tool that dumps file system metadata to SQLite database.
• New tsk_getimes tool that collects MAC time data on all file systems (equivalent to fls -m on a series of volumes)
• New tsk_comparedir tool that compares a directory to an image to detect rootkits.
• New C++ TskAuto class that makes it easier to create automated tools that analyze all files.
• Name cleanup out of libraries and into tools.
• img_cat -e and -s flags.
• Changed how default NTFS $Data attribute is named.
• HFS+ Case sensitive flag in fsstat.
Bug fixes include:
• FAT performance
• Crash fix for corrupt NTFS file
• Adding attribute runs on fragmented files with multiple attributes of the same type.
|