[sleuthkit-developers] New Features / Changes

[Brian C. <ca...@sl...>]

Welcome everyone.

At this point, there are around 15 people on this list so it is time to 
start discussing what to develop.

I would first like to say that I welcome any help, espeically on the
interface.  I enjoy the low-level disk and file system tools and would
welcome anyone that would like to offer a better, and still free interface.  My primary focus right now is on my Purdue research,
so any help with this work is appreciated.  

The following are the projects that I know of:
- Indexed Search (Fox-IT)
- Integrating foremost (Fox-IT)
- New Interface (openforensics.org)
- Registry Viewing Tools (not yet public)

The smaller features that I want to see done are the following:
- Redesign Autopsy so that it is easier for people to add 
functions.  
- Add a sector offset value to all Sleuth Kit tools so that they can be 
used on a disk image instead of just file system images
- Add 'mmls' and offset values to Autopsy so that disk images can 
be imported
- Integrate the new Foundstone tools for viewing the trash bin,
history file etc.
- Improve timeline tools and add some scripts to parse logs into the
body file.

I think the redesign is the most important to make the Fox-IT work
easier.

thanks for your interest.
brian