New versions of the tools are available!
TSK v2:
* Minor Bug Fixes
o NTFS could go into an infinite loop if attribute list entry
was reallocated.
o Last block group in ExtX fsstat output had incorrect
percentage of free blocks.
* Major Updates
o Support for split and disk images
o File system type can be detected (-f no longer required)
o New file system type names (for -f)
o Updated internal design
o New 'img_stat' tool to display details about the image file
format
o New 'mmls' flag (-b) to print sizes in bytes
o New 'mmstat' tool to give details about the volume (media
management) system
o Non-printable charactors in UFS/ExtX names are replaced
with '.'
o New Linux 'disk_sreset' tool to reset HPA on an ATA disk.
o Renamed 'diskstat' to 'disk_stat' and 'sstrings' to
'srch_strings' to make names less cryptic.
MD5 Value: 757f76f245493ebff2d0daeb64f37b5d
http://www.sleuthkit.org/sleuthkit/download.php
Autopsy v2.04:
* Bug Fixes:
o none.
* Updates:
o Disk and split image support
o Timeline can be created in comma delimited format
o File listing of NTFS searches for deleted files by parent
MFT entry
o Notes now contain metadata from the file
MD5 Value: 776edcd060ea7a0f187f5732e6bfeacc
http://www.sleuthkit.org/autopsy/download.php
brian
|