[sleuthkit-users] TSK 1.71 & Autopsy 2.02 release

[Brian C. <ca...@sl...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

New releases of both tools are available with bug fixes and new 
features. I went through the NTFS code and added some more details and 
features.  FFS is next.


TSK 1.71
http://www.sleuthkit.org/sleuthkit/

Bug Fixes
- - Type / size casting errors with FAT.
- - NTFS handling of sparse files
- - Filler errors with NTFS files and 'icat' (rare)
- - Missing name with NTFS attribute (rare)

Major Updates
- - Improved istat & fsstat output for NTFS.
- - 'ifind -p' will find deleted NTFS files based on their parent 
directory, which results in more deleted files being found.
- - Encrypted and compressed files are noted, but not processed.
- - Improved slack support in dls -s.
- - dcalc can calculte original location of data in dls -s output.
- - GPT disk support in mmls.



Autopsy 2.02
http://www.sleuthkit.org/autopsy/

Bug Fixes:
- - An error message was not properly printed.

Updates:
- - More deleted NTFS files are now listed in file mode because a search 
is done for unallocated files that have a given parent directory.
- - A filter removes duplicate deleted NTFS names from the file listings.
- - OS X no longer needs the strings wrapper.


brian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFBCe4WOK1gLsdFTIsRAjt8AJ9rrNpfwcuX8f3k2RtCIQfHUDkcMACeKDJM
WgX1tFFAB+qBIDzHn5cjTxU=
=s3Z4
-----END PGP SIGNATURE-----