[sleuthkit-users] (no subject)

[Alan B. <ala...@gm...>]

New photorec carver is a great addition but only processing unallocated.
Definitely better support for carving of files in allocated such as
pagefil, shadow volumes, thumbcache,  etc. Option in photorec to choose
what files are extracted.
I too would like native support on Linux, have managed to run autopsy on
Ubuntu but photorec module only works on windows only.
Also generating reports that include bookmarked images should include a
thumbnail of the image with mac times.

Great work done on autopsy to date