RE: [sleuthkit-users] A patch to use Foremost-0.64 with Autopsy 1.71 / 1.73
Brought to you by:
carrier
From: Pepijn V. <vi...@fo...> - 2003-07-24 07:34:40
|
Hi Brian, I acknowledge that problem indeed. The patch is just meant for those who = happen to run a Linuxflavour and happen to use Foremost (like myself). I = too hope that Foremost develops a little bit further, and maybe this = patch helps a little in that direction too ;)=20 Keep up the good work with your projects! Regards, Pepijn -----Oorspronkelijk bericht----- Van: Brian Carrier [mailto:ca...@sl...]=20 Verzonden: Wednesday, July 23, 2003 9:19 PM Aan: Pepijn Vissers; sle...@li... Onderwerp: Re: [sleuthkit-users] A patch to use Foremost-0.64 with = Autopsy 1.71 / 1.73 Just as an FYI to other users, I have been reluctant to integrate=20 foremost into Autopsy because it only runs on Linux. I am trying=20 to keep all of Autopsy's features available on all systems (BSDs,=20 Solaris, etc.). =20 I have been waiting to help port foremost to other OSs, but other projects always turn up... =20 Thanks Pepijn! Hopefully this patch will be used when we can get foremost on other platforms. =20 brian On 22 Jul 2003 00:45 PDT you wrote: > Hi people, >=20 > Foremost is a tool which can recover data from unallocated space by=20 > user definable headers and optionally footers. It runs on most Linux=20 > distributions. I thought it would be handy to be able to integrate=20 > this into Autopsy, along with the option to edit the configuration=20 > file. Well, here is the patch. Effort has been made to respect the=20 > original format of the 'base/autopsyfunc.pm'. |