[sleuthkit-announce] TSK 3.2.0 is available
Brought to you by:
carrier
From: Brian C. <ca...@sl...> - 2010-10-29 04:24:18
|
3.2.0 is available for download. Lots of new features and a few bug fixes.Thanks to Anthony Lawrence for help with the new features. http://www.sleuthkit.org/sleuthkit/ New features include: • New tsk_recover tool that extracts files from an image to a local directory. • New tsk_loaddb tool that dumps file system metadata to SQLite database. • New tsk_getimes tool that collects MAC time data on all file systems (equivalent to fls -m on a series of volumes) • New tsk_comparedir tool that compares a directory to an image to detect rootkits. • New C++ TskAuto class that makes it easier to create automated tools that analyze all files. • Name cleanup out of libraries and into tools. • img_cat -e and -s flags. • Changed how default NTFS $Data attribute is named. • HFS+ Case sensitive flag in fsstat. Bug fixes include: • FAT performance • Crash fix for corrupt NTFS file • Adding attribute runs on fragmented files with multiple attributes of the same type. |