sleuthkit-users

[sleuthkit-users] New Release of Sleuth Kit and Autopsy

[Brian C. <ca...@sl...>]

Hello all,

There are new releases of both The Sleuth Kit and Autopsy.

The Sleuth Kit 1.66:
     *  Bug Fixes
           o fls -r would generate duplicate deleted NTFS file names
           o Would not compile under OpenBSD 3
           o sorter results would go into different categories depending 
on version of Perl and its internal sorting order
           o ffind now reports the attribute name for NTFS
     * Major New Features
           o icat shows slack space with '-s'
           o Solaris x86 disk label (VTOC) support added

http://www.sleuthkit.org/sleuthkit/download.php

Autopsy 1.75:
     *  Bug Fixes:
           o Better error handling and messages
     * Updates:
           o Graphics load better now.

http://www.sleuthkit.org/autopsy/download.php

brian

[sleuthkit-users] New Release of Sleuth Kit and Autopsy

[Francesco S. <sch...@bi...>]

Hi Brian,

 

Downloaded your new release of Sleuth kit and Autopsy.

 

I've been using Mac OSX as my operating system to run Sleuth Kit.
However after I installed the new version 10.3 (Panther) and then tried
to install Sleuth Kit, I got the following when I ran make;

 

cd src/misc; make "CC=gcc" MAKELEVEL=

unsupported system: Darwin.7.0.0

make: *** [defs] Error 1

make: *** [no-perl] Error 2

 

Any advise?

 

 

Regards

 

Frank

Re: [sleuthkit-users] New Release of Sleuth Kit and Autopsy

[Brian C. <ca...@sl...>]

On Sunday, November 16, 2003, at 12:38  AM, Francesco Schiliro wrote:

> Hi Brian,
>
> Downloaded your new release of Sleuth kit and Autopsy.
>
> =A0I=92ve been using Mac OSX as my operating system to run Sleuth =
Kit.=A0=20
> However after I installed the new version 10.3 (Panther) and then=20
> tried to install Sleuth Kit, I got the following when I ran make;
>
Francesco,

I haven't upgraded to Panther yet, so I didn't notice this problem. It=20=

is a simple fix though.  Edit the src/makedefs file and on line 38 is=20
the entry:

     Darwin.6.*) DEFS=3D"-DDARWIN"
         ;;

You can either change the 6 to a 7 and not try and compile it under OS=20=

X 10.2 or you can make two more lines below that entry with:

     Darwin.7.*) DEFS=3D"-DDARWIN"
         ;;

I'll fix that in the next release.

Does Panther have a better version of 'strings'?  I.e. one that=20
supports '-t d' and other GNU binutils flags?

thanks,
brian=