Thread: [sleuthkit-users] What's Missing Most From Autopsy?
Brought to you by:
carrier
Menu
▾
▴
sleuthkit-users
|
From: Brian C. <ca...@sl...> - 2015-03-25 13:48:04
|
I'm taking a survey to help plan for some future development. What is the one feature that you want most in Autopsy that is not there? Send replies to either me directly or the list. thanks, brian |
|
From: Simson G. <si...@ac...> - 2015-03-25 13:58:14
|
I think that it would be very useful for Autopsy to run on another platform—either Linux or Mac, but probably Linux. That would allow it to be used on bootable CDs without requiring a full Windows environment. The second thing I'd like to see is some kind of support for parallel computation on multiple systems—an Autopsy cluster. Finally, I'd like to see better support for encrypted containers and password cracking. On Wed, Mar 25, 2015 at 9:47 AM, Brian Carrier <ca...@sl...> wrote: > I'm taking a survey to help plan for some future development. What is the > one feature that you want most in Autopsy that is not there? Send replies > to either me directly or the list. > > thanks, > brian > > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, > sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for > all > things parallel software development, from weekly thought leadership blogs > to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > |
|
From: Luis G. 'P. <po...@lg...> - 2015-03-25 17:35:14
|
+1, give us Linux support back!! (PLEASE) :) Keep up the good work Brian, and thanks! -- Sent from a mobile device. Please excuse any typos. > El 25/3/2015, a las 14:57, Simson Garfinkel <si...@ac...> escribió: > > I think that it would be very useful for Autopsy to run on another platform—either Linux or Mac, but probably Linux. That would allow it to be used on bootable CDs without requiring a full Windows environment. > > The second thing I'd like to see is some kind of support for parallel computation on multiple systems—an Autopsy cluster. > > Finally, I'd like to see better support for encrypted containers and password cracking. > >> On Wed, Mar 25, 2015 at 9:47 AM, Brian Carrier <ca...@sl...> wrote: >> I'm taking a survey to help plan for some future development. What is the one feature that you want most in Autopsy that is not there? Send replies to either me directly or the list. >> >> thanks, >> brian >> >> >> ------------------------------------------------------------------------------ >> Dive into the World of Parallel Programming The Go Parallel Website, sponsored >> by Intel and developed in partnership with Slashdot Media, is your hub for all >> things parallel software development, from weekly thought leadership blogs to >> news, videos, case studies, tutorials and more. Take a look and join the >> conversation now. http://goparallel.sourceforge.net/ >> _______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >> http://www.sleuthkit.org > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |
|
From: Atila <ati...@dp...> - 2015-03-25 19:15:11
|
+1 On 25-03-2015 14:10, Luis Gómez 'Pope' wrote: > +1, give us Linux support back!! (PLEASE) :) > > Keep up the good work Brian, and thanks! > > -- > Sent from a mobile device. Please excuse any typos. > > > El 25/3/2015, a las 14:57, Simson Garfinkel <si...@ac... > <mailto:si...@ac...>> escribió: > >> I think that it would be very useful for Autopsy to run on another >> platform—either Linux or Mac, but probably Linux. That would allow it >> to be used on bootable CDs without requiring a full Windows environment. >> >> The second thing I'd like to see is some kind of support for parallel >> computation on multiple systems—an Autopsy cluster. >> >> Finally, I'd like to see better support for encrypted containers and >> password cracking. >> >> On Wed, Mar 25, 2015 at 9:47 AM, Brian Carrier <ca...@sl... >> <mailto:ca...@sl...>> wrote: >> >> I'm taking a survey to help plan for some future development. >> What is the one feature that you want most in Autopsy that is not >> there? Send replies to either me directly or the list. >> >> thanks, >> brian >> |
|
From: Ketil F. <ke...@fr...> - 2015-03-25 19:29:54
|
I agree that a prepackaged Linux version would be nice, but I think this is a packaging issue that doesn't require lots of development resources and planning for the future. Autopsy builds nicely on Ubuntu Linux today, so I already run it on Linux. Fairly comprehensive build instructions are available here if anybody wants to try: http://forum.sleuthkit.org/viewtopic.php?f=5&t=106 Ketil On 25 Mar 2015 20:16, "Atila" <ati...@dp...> wrote: > +1 > On 25-03-2015 14:10, Luis Gómez 'Pope' wrote: > > +1, give us Linux support back!! (PLEASE) :) > > Keep up the good work Brian, and thanks! > > -- > Sent from a mobile device. Please excuse any typos. > > > El 25/3/2015, a las 14:57, Simson Garfinkel <si...@ac...> escribió: > > I think that it would be very useful for Autopsy to run on another > platform—either Linux or Mac, but probably Linux. That would allow it to be > used on bootable CDs without requiring a full Windows environment. > > The second thing I'd like to see is some kind of support for parallel > computation on multiple systems—an Autopsy cluster. > > Finally, I'd like to see better support for encrypted containers and > password cracking. > > On Wed, Mar 25, 2015 at 9:47 AM, Brian Carrier <ca...@sl...> > wrote: > >> I'm taking a survey to help plan for some future development. What is the >> one feature that you want most in Autopsy that is not there? Send replies >> to either me directly or the list. >> >> thanks, >> brian >> >> > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, > sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for > all > things parallel software development, from weekly thought leadership blogs > to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > |
|
From: Atila <ati...@dp...> - 2015-03-25 20:54:39
|
Yes, it is possible, but I'm sure there would be more users with prepacked packages. Not a terrible problem for me, I use a Windows VM in a Fedora host (ridiculous, I know). On 25-03-2015 16:29, Ketil Froyn wrote: > > I agree that a prepackaged Linux version would be nice, but I think > this is a packaging issue that doesn't require lots of development > resources and planning for the future. Autopsy builds nicely on Ubuntu > Linux today, so I already run it on Linux. Fairly comprehensive build > instructions are available here if anybody wants to try: > > http://forum.sleuthkit.org/viewtopic.php?f=5&t=106 > > Ketil > > On 25 Mar 2015 20:16, "Atila" <ati...@dp... > <mailto:ati...@dp...>> wrote: > > +1 > On 25-03-2015 14:10, Luis Gómez 'Pope' wrote: >> +1, give us Linux support back!! (PLEASE) :) >> >> Keep up the good work Brian, and thanks! >> >> -- >> Sent from a mobile device. Please excuse any typos. >> >> >> El 25/3/2015, a las 14:57, Simson Garfinkel <si...@ac... >> <mailto:si...@ac...>> escribió: >> >>> I think that it would be very useful for Autopsy to run on >>> another platform—either Linux or Mac, but probably Linux. That >>> would allow it to be used on bootable CDs without requiring a >>> full Windows environment. >>> >>> The second thing I'd like to see is some kind of support for >>> parallel computation on multiple systems—an Autopsy cluster. >>> >>> Finally, I'd like to see better support for encrypted containers >>> and password cracking. >>> >>> On Wed, Mar 25, 2015 at 9:47 AM, Brian Carrier >>> <ca...@sl... <mailto:ca...@sl...>> wrote: >>> >>> I'm taking a survey to help plan for some future >>> development. What is the one feature that you want most in >>> Autopsy that is not there? Send replies to either me >>> directly or the list. >>> >>> thanks, >>> brian >>> > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel > Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your > hub for all > things parallel software development, from weekly thought > leadership blogs to > news, videos, case studies, tutorials and more. Take a look and > join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > |
|
From: Sean M. <mcl...@in...> - 2015-03-25 23:21:37
|
> I think that it would be very useful for Autopsy to run > on another platform—either Linux or Mac, but probably Linux. > That would allow it to be used on bootable CDs without > requiring a full Windows environment. I would agree with this whole heartedly. I practical never used Windows as my primary analysis system (and when I do it is because certain tools ONLY run in Windows but those tools are becoming much less relevant to my work). Most of the triage and early processing is OS X or, more commonly, Linux, where I am relatively certain that the image that I am analyzing is not going to corrupt my analysis system. Sean McLinden -- NOTICE of CONFIDENTIALITY and DISCLAIMER This transmission, including attachments, is confidential. It may also be privileged or otherwise protected by work product immunity or other legal rules. If you have received it by mistake, please let us know by e-mail to the sender, only, and delete it from your system; you may not copy this message or disclose its contents to anyone. Unless expressly noted, above, this communication does not reflect an intention by the sender to conduct a transaction or make any agreement by electronic means. Nothing contained in this transmission shall constitute a contract or electronic signature under the ESIGN, any version of the UETA, or any other statute governing electronic transactions. If this transmission contains advice, the advice is based on instructions in relation to, and is provided to the addressee in connection with, the matter mentioned above. Responsibility is not accepted for reliance upon it by any other person or for any other purpose. |
|
From: Nanni B. <dig...@gm...> - 2015-03-25 14:07:00
|
Timeline exportable report Dott. Nanni Bassetti www.nannibassetti.com Il 25/mar/2015 14:59 "Simson Garfinkel" <si...@ac...> ha scritto: > I think that it would be very useful for Autopsy to run on another > platform—either Linux or Mac, but probably Linux. That would allow it to be > used on bootable CDs without requiring a full Windows environment. > > The second thing I'd like to see is some kind of support for parallel > computation on multiple systems—an Autopsy cluster. > > Finally, I'd like to see better support for encrypted containers and > password cracking. > > On Wed, Mar 25, 2015 at 9:47 AM, Brian Carrier <ca...@sl...> > wrote: > >> I'm taking a survey to help plan for some future development. What is the >> one feature that you want most in Autopsy that is not there? Send replies >> to either me directly or the list. >> >> thanks, >> brian >> >> >> >> ------------------------------------------------------------------------------ >> Dive into the World of Parallel Programming The Go Parallel Website, >> sponsored >> by Intel and developed in partnership with Slashdot Media, is your hub >> for all >> things parallel software development, from weekly thought leadership >> blogs to >> news, videos, case studies, tutorials and more. Take a look and join the >> conversation now. http://goparallel.sourceforge.net/ >> _______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >> http://www.sleuthkit.org >> > > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, > sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for > all > things parallel software development, from weekly thought leadership blogs > to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > |
|
From: Brian C. <ca...@sl...> - 2015-03-25 22:18:41
|
Hi Nanni, What do you mean by this? Do you mean an HTML report with a table and rows for events or an ASCII timeline similar to the old mactime reports? thanks, brian On Mar 25, 2015, at 10:06 AM, Nanni Bassetti <dig...@gm...> wrote: > Timeline exportable report > > Dott. Nanni Bassetti www.nannibassetti.com > > Il 25/mar/2015 14:59 "Simson Garfinkel" <si...@ac...> ha scritto: > I think that it would be very useful for Autopsy to run on another platform—either Linux or Mac, but probably Linux. That would allow it to be used on bootable CDs without requiring a full Windows environment. > > The second thing I'd like to see is some kind of support for parallel computation on multiple systems—an Autopsy cluster. > > Finally, I'd like to see better support for encrypted containers and password cracking. > > On Wed, Mar 25, 2015 at 9:47 AM, Brian Carrier <ca...@sl...> wrote: > I'm taking a survey to help plan for some future development. What is the one feature that you want most in Autopsy that is not there? Send replies to either me directly or the list. > > thanks, > brian > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/_______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |
|
From: Oluseyi A. <sey...@gm...> - 2015-03-25 14:30:29
|
H Briani, I’ll like to suggest a few things. A better parser/viewer for email artifacts (pst, ost etc), Skype (main.db / chartsync), and if possible the ability to conduct server based forensics on artifacts such as Exchange / AD (edb files) and SQL (ld and mdf). Thanks for the good work and the training. It was well worth it. Regards, Oluseyi Akindeinde > On Mar 25, 2015, at 2:47 PM, Brian Carrier <ca...@sl...> wrote: > > > I'm taking a survey to help plan for some future development. What is the one feature that you want most in Autopsy that is not there? Send replies to either me directly or the list. > > > thanks, > brian > > > > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > |
|
From: Ketil F. <ke...@fr...> - 2015-03-25 14:32:47
|
Queuing of images. I want to add multiple images to autopsy, and it just takes too long to be practical when there's more than a couple. If I could add 5 disk images on Friday and look at ingested results on Monday morning, I've probably saved several days of waiting. This could either be done with a queue in the GUI, or could perhaps be solved with a "command line" mode that could add an image to a case and run the ingests. With that I could write a script/bat file that adds the images sequentially. Sort of like tsk_loaddb itself, but more closely integrated with Autopsy. By the way, a command line mode to parse a disk image, and/or run some ingest modules, and/or generate reports is useful when processing many images. It'd be great to have that as an option! Cheers, Ketil On 25 March 2015 at 14:47, Brian Carrier <ca...@sl...> wrote: > I'm taking a survey to help plan for some future development. What is the one feature that you want most in Autopsy that is not there? Send replies to either me directly or the list. > > thanks, > brian > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org -- -Ketil |
|
From: Adam D. Ph.D., P.E. <de...@al...> - 2015-03-25 15:18:57
|
Get 3.x to again run on the Mac! --Adam > On Mar 25, 2015, at 9:47 AM, Brian Carrier <ca...@sl...> wrote: > > I'm taking a survey to help plan for some future development. What is the one feature that you want most in Autopsy that is not there? Send replies to either me directly or the list. > > thanks, > brian > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > |
|
From: Alonso C. Q. / R. <re...@gm...> - 2015-03-25 16:11:51
|
Saludos: I suggest to include the capabilities of data unit analysis and metatada analysis as autopsy 2. Atte. -- Alonso Eduardo Caballero Quezada - www.ReYDeS.com/d/?q=blog - Re...@gm... Brainbench Certified Network Security, Computer Forensics (US) & Linux Administration http://pe.linkedin.com/in/alonsocaballeroquezada - https://twitter.com/Alonso_ReYDeS <Re...@gm...> |
|
From: MATT P. <mat...@ad...> - 2015-03-25 16:14:21
|
I would like to see metrics for each stage of the ingest. |
|
From: Brian C. <ca...@sl...> - 2015-03-25 16:55:30
|
Hi Matt, At any time during or after ingest, you can go to Help -> Get Ingest Progress Snapshot and it will bring up a dialog showing what each of the threads are doing, what is in the scheduler (which will probably not all make much sense unless you've looked at the scheduler internals) and how much time was spent on each module. Does that meet your needs? thanks, brian On Mar 25, 2015, at 12:14 PM, MATT PIERCE <mat...@ad...> wrote: > I would like to see metrics for each stage of the ingest. > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/_______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |
|
From: Adam D. Ph.D., P.E. <de...@al...> - 2015-03-25 16:51:27
|
Good to know. So, it should also run on Linux with Wine. But, either is somewhat of a kludge. And, since up until recent versions it ran natively cross platform, it would be great to get that feature back. --Adam > On Mar 25, 2015, at 12:46 PM, Oluseyi Akindeinde <sey...@gm...> wrote: > > Infact you can run it on Mac OSX (Yosemite). > > I use with PlayOnMac (i.e Wine) and it has been pretty flawless. I run it on the MacbookPro 15” 16GB RAM. Screenshot attached. > > <autopsy.png> > > > >> On Mar 25, 2015, at 3:18 PM, Adam Dershowitz Ph.D., P.E. <de...@al...> wrote: >> >> Get 3.x to again run on the Mac! >> >> --Adam >> >> >> >> On Mar 25, 2015, at 9:47 AM, Brian Carrier <ca...@sl...> wrote: >> >> I'm taking a survey to help plan for some future development. What is the one feature that you want most in Autopsy that is not there? Send replies to either me directly or the list. >> >> thanks, >> brian >> >> >> ------------------------------------------------------------------------------ >> Dive into the World of Parallel Programming The Go Parallel Website, sponsored >> by Intel and developed in partnership with Slashdot Media, is your hub for all >> things parallel software development, from weekly thought leadership blogs to >> news, videos, case studies, tutorials and more. Take a look and join the >> conversation now. http://goparallel.sourceforge.net/ >> _______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >> http://www.sleuthkit.org >> >> -- >> This message has been scanned for viruses and >> dangerous content by MailScanner, and is >> believed to be clean. >> >> >> >> ------------------------------------------------------------------------------ >> Dive into the World of Parallel Programming The Go Parallel Website, sponsored >> by Intel and developed in partnership with Slashdot Media, is your hub for all >> things parallel software development, from weekly thought leadership blogs to >> news, videos, case studies, tutorials and more. Take a look and join the >> conversation now. http://goparallel.sourceforge.net/ >> _______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >> http://www.sleuthkit.org >> > > -- > This message has been scanned for viruses and > dangerous content by MailScanner <http://www.mailscanner.info/>, and is > believed to be clean. |
|
From: Richard M. II <ma...@ma...> - 2015-03-25 18:51:52
|
Dr. Garfinkel is correct. "Other than Windows-based platform" is the the thing missing most. Being able to process using multiple systems would be a very much nice to have. V/R Rich McCutcheon > On Mar 25, 2015, at 1:10 PM, Luis Gómez 'Pope' <po...@lg...> wrote: > > +1, give us Linux support back!! (PLEASE) :) > > Keep up the good work Brian, and thanks! > > -- > Sent from a mobile device. Please excuse any typos. > > > El 25/3/2015, a las 14:57, Simson Garfinkel <si...@ac... <mailto:si...@ac...>> escribió: > >> I think that it would be very useful for Autopsy to run on another platform—either Linux or Mac, but probably Linux. That would allow it to be used on bootable CDs without requiring a full Windows environment. >> >> The second thing I'd like to see is some kind of support for parallel computation on multiple systems—an Autopsy cluster. >> >> Finally, I'd like to see better support for encrypted containers and password cracking. >> >> On Wed, Mar 25, 2015 at 9:47 AM, Brian Carrier <ca...@sl... <mailto:ca...@sl...>> wrote: >> I'm taking a survey to help plan for some future development. What is the one feature that you want most in Autopsy that is not there? Send replies to either me directly or the list. >> >> thanks, >> brian >> >> >> ------------------------------------------------------------------------------ >> Dive into the World of Parallel Programming The Go Parallel Website, sponsored >> by Intel and developed in partnership with Slashdot Media, is your hub for all >> things parallel software development, from weekly thought leadership blogs to >> news, videos, case studies, tutorials and more. Take a look and join the >> conversation now. http://goparallel.sourceforge.net/ <http://goparallel.sourceforge.net/> >> _______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users <https://lists.sourceforge.net/lists/listinfo/sleuthkit-users> >> http://www.sleuthkit.org <http://www.sleuthkit.org/> >> >> ------------------------------------------------------------------------------ >> Dive into the World of Parallel Programming The Go Parallel Website, sponsored >> by Intel and developed in partnership with Slashdot Media, is your hub for all >> things parallel software development, from weekly thought leadership blogs to >> news, videos, case studies, tutorials and more. Take a look and join the >> conversation now. http://goparallel.sourceforge.net/ <http://goparallel.sourceforge.net/>_______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users <https://lists.sourceforge.net/lists/listinfo/sleuthkit-users> >> http://www.sleuthkit.org <http://www.sleuthkit.org/> > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/_______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |
|
From: D3 k. <dee...@gm...> - 2015-03-25 19:02:02
|
Dear all members, Regarding this group, first thanks for posting n discussing productive things perspective to forensic. I m just benchmarking few tools, I came to Autopsy latest version ; that's pretty good open source composite forensic tool. Forensically ppl don't want look for manual artefact they just want just click on single option like filters or any script (enscript) and everything pulls out. So into this tool lots of good automated parsing concepts are there which pull artifacts from volume n slack areas. Overall good, please add more parsing options... ----------- Regards D3pak kumar IT Security & Digital Forensic On 26-Mar-2015 12:24 am, "Richard McCutcheon II" <ma...@ma...> wrote: > Dr. Garfinkel is correct. > > "Other than Windows-based platform" is the the thing missing most. > Being able to process using multiple systems would be a very much nice to > have. > > V/R > > Rich McCutcheon > > On Mar 25, 2015, at 1:10 PM, Luis Gómez 'Pope' <po...@lg...> wrote: > > +1, give us Linux support back!! (PLEASE) :) > > Keep up the good work Brian, and thanks! > > -- > Sent from a mobile device. Please excuse any typos. > > > El 25/3/2015, a las 14:57, Simson Garfinkel <si...@ac...> escribió: > > I think that it would be very useful for Autopsy to run on another > platform--either Linux or Mac, but probably Linux. That would allow it to be > used on bootable CDs without requiring a full Windows environment. > > The second thing I'd like to see is some kind of support for parallel > computation on multiple systems--an Autopsy cluster. > > Finally, I'd like to see better support for encrypted containers and > password cracking. > > On Wed, Mar 25, 2015 at 9:47 AM, Brian Carrier <ca...@sl...> > wrote: > >> I'm taking a survey to help plan for some future development. What is the >> one feature that you want most in Autopsy that is not there? Send replies >> to either me directly or the list. >> >> thanks, >> brian >> >> >> >> ------------------------------------------------------------------------------ >> Dive into the World of Parallel Programming The Go Parallel Website, >> sponsored >> by Intel and developed in partnership with Slashdot Media, is your hub >> for all >> things parallel software development, from weekly thought leadership >> blogs to >> news, videos, case studies, tutorials and more. Take a look and join the >> conversation now. http://goparallel.sourceforge.net/ >> _______________________________________________ >> sleuthkit-users mailing list >> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users >> http://www.sleuthkit.org >> > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, > sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for > all > things parallel software development, from weekly thought leadership blogs > to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, > sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for > all > things parallel software development, from weekly thought leadership blogs > to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. > http://goparallel.sourceforge.net/_______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, > sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for > all > things parallel software development, from weekly thought leadership blogs > to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org > > |
|
From: Hargreaves, C. <chr...@cr...> - 2015-03-25 19:29:38
|
+1 Cross platform. Linux & Mac support would be very helpful. Chris ---- Dr Chris Hargreaves Cranfield Forensic Institute Cranfield University Shrivenham Wilts SN6 8LA Tel: +44 (0)1793 785993 > On 25 Mar 2015, at 13:47, Brian Carrier <ca...@sl...> wrote: > > I'm taking a survey to help plan for some future development. What is the one feature that you want most in Autopsy that is not there? Send replies to either me directly or the list. > > thanks, > brian > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |
|
From: Brian C. <ca...@sl...> - 2015-03-25 22:17:45
|
Thanks everyone. On the Linux front, I sent a message out to some package maintainers to get them involved to figure out what we should be doing so that it is easy for them to package. thanks, brian On Mar 25, 2015, at 9:47 AM, Brian Carrier <ca...@sl...> wrote: > I'm taking a survey to help plan for some future development. What is the one feature that you want most in Autopsy that is not there? Send replies to either me directly or the list. > > thanks, > brian > > > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sleuthkit-users mailing list > https://lists.sourceforge.net/lists/listinfo/sleuthkit-users > http://www.sleuthkit.org |
×
Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.
Thanks for helping keep SourceForge clean.
X