[sleuthkit-users] TSK 2.07 Released

[Brian C. <ca...@sl...>]

Version 2.07 of TSK is now available in source and Win32 executable  
form:

www.sleuthkit.org/sleuthkit/

There are a lot of updates and bug fixes. The summarized list is  
below.  The executive summary is that there are new flags for ils to  
find orphan files and new flags for dls to specify allocation  
status.  There were a lot of internal updates as well.   There were a  
few NTFS bug fixes as well and a sorter fix for Cygwin.

brian

MD5 (sleuthkit-2.07.tar.gz) = 8165ef1c657e7ebca7a61542f784a04b
MD5 (sleuthkit-win32-2.07.zip) = fc723f5f22ac750b89b96fbefa5f9b75



Updates:
- Added '-p'  flag to ils to find orphan files
- added '-a' and '-A' flags to dls to specify allocation status
- Detect and prevent infinite loops in corrupt directories and FAT  
files.
- Updated AFFLIB, libewf, and file
- improved FAT dentry detection (check size)
- new internal fs_read_file()
- Windows visual studio files included with source code
- cleaned up error reporting code
- added caching to FAT code.
- Added a NULL check to fs_inode_free (Michael Cohen)
- Improved ifind_path code so that allocated names are given priority  
(Dave Collett)


Bug Fixes:
- NTFS compression bug with corrupt data
- sanity check to dcat_lib in case the requested number of blocks was  
too big.
- fs_data lookup bug fixes by Dave Collett.
- sorter does not clear path so it can run under Cygwin
- Memory leak fixes in FAT and NTFS.