Re: [sleuthkit-users] Autopsy 3.1.0 Beta 1 Is Available
Brought to you by:
carrier
From: Brian C. <ca...@sl...> - 2014-07-15 20:41:59
|
Hi Luis, We still haven't gotten a chance to fix all of the memory leaks in scalpel, so it is still disabled and therefore not visible fin the ingest module list. The fact that you can still see it behind the scenes is because it is there, just hidden so that we can more easily test it when we try to fix the leaks. At some point, we may decide to simply write the unallocated space files to disk and carve them. In which case the memory leaks will not be as obvious. We are trying to run scalpel as a library inside of Autopsy. Although, we've heard that people may rather want PhotoRec instead of scalpel if we do that approach. PhotoRec is GPL, which means we can use it as a stand-alone command line tool, but we can't incorporate it as a library. brian On Jul 14, 2014, at 3:52 PM, Luís Filipe Nassif <lfc...@gm...> wrote: > Hi, > > Congratulations for the very important Autopsy new features! I started to test the new 3.1-beta release. The ScalpelCarver module is correctly listed as a installed plugin, but it does not appear in the "Configure Ingest Modules" step. This behavior also occurs with version 3.0.10. I need to configure something to enable ScalpelCarver? > > Thanks, > Luis Nassif > > > 2014-07-14 11:48 GMT-03:00 Brian Carrier <ca...@sl...>: > The long-awaited 3.1.0 beta is available. It has been a long time coming and has several new things, including: > > - Multi-threaded pipelines > - File type ingest module > - File extension mismatch ingest module > - Android ingest module > - KML report module > - Tags can be deleted > - Hash databases can be created and maintained > - ExFAT support > - ..... > > The official website is not fully updated yet, but you can get the windows installers from source forge: > > http://sourceforge.net/projects/autopsy/files/autopsy/3.1.0%20Beta%201/ > > brian > > > > > > > ------------------------------------------------------------------------------ > Want fast and easy access to all the code in your enterprise? Index and > search up to 200,000 lines of code with a free copy of Black Duck® > Code Sight™ - the same software that powers the world's largest code > search on Ohloh, the Black Duck Open Hub! Try it now. > http://p.sf.net/sfu/bds > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > ------------------------------------------------------------------------------ > Want fast and easy access to all the code in your enterprise? Index and > search up to 200,000 lines of code with a free copy of Black Duck® > Code Sight™ - the same software that powers the world's largest code > search on Ohloh, the Black Duck Open Hub! Try it now. > http://p.sf.net/sfu/bds_______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |