sleuthkit-users

[sleuthkit-users] Autopsy v2.00 Release

[Brian C. <ca...@sl...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Version 2.00 of Autopsy has been released.

http://www.sleuthkit.org/autopsy

The biggest change is the internal design (which you should not notice) 
and the live analysis support.  Check out the last Sleuth Kit Informer 
for more details on the live analysis mode.  Basically, autopsy will 
create a directory that you can burn to a CD and plug it into a running 
UNIX system so that you can check out some logs and other stuff on a 
suspect system and not modify the A-Times and be affected by rootkits.

There are some other minor updates as well.


MD5:  73873b4af937cf11354f681b0c269f50

Signature of autopsy-2.00.tar.gz:
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQBAW0y5OK1gLsdFTIsRAp8tAJ9P1qP5NrlC8RHl9vrCcPX+Wjzj+QCeNIVt
g05FdzWmEY+BVX8GJAFYEac=
=Jlej
- -----END PGP SIGNATURE-----


brian
  
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFAW1TeOK1gLsdFTIsRArRdAJwLE5GtG/LHmYSXWb1ucD6ZmuoASQCfT/x3
LtYF0xrhA4S5Ueo/u/yniUk=
=ci3L
-----END PGP SIGNATURE-----

[sleuthkit-users] Re: [sleuthkit-announce] Autopsy v2.00 Release

[Angus M. <an...@n-...>]

On Friday 19 March 2004 20:15, Brian Carrier wrote:
> Version 2.00 of Autopsy has been released.
>
> http://www.sleuthkit.org/autopsy

Looks nice - it's certainly cured the zombie problem that I noticed a while 
back on Fedora & Redhat. It feels slicker too.

Well done and thanks!

Re: [sleuthkit-users] Re: [sleuthkit-announce] Autopsy v2.00 Release

[Matthew M. S. <msh...@th...>]

> Looks nice - it's certainly cured the zombie problem 

Looks like they need you in Milwaukee Brian, as we know that with the
Dawn comes The Dead!

Sorry, I just couldn't resist!

Great work as always Brian!

Re: [sleuthkit-users] Re: [sleuthkit-announce] Autopsy v2.00 Release

[Brian C. <ca...@sl...>]

On Mar 19, 2004, at 4:22 PM, Angus Marshall wrote:

> On Friday 19 March 2004 20:15, Brian Carrier wrote:
>> Version 2.00 of Autopsy has been released.
>>
>> http://www.sleuthkit.org/autopsy
>
> Looks nice - it's certainly cured the zombie problem that I noticed a 
> while
> back on Fedora & Redhat. It feels slicker too.

Yea, it turned out that was a Perl 5.8 issue.  They changed the way 
that signals are handled in 5.8, which resulted in zombies on some 
systems and the missing command output.   Unfortunately, now I get some 
errors about "Can't ignore child signal" (or something), but the 
zombies are gone.

> Well done and thanks!

thanks.

sleuthkit.org is having some problems, so use the mirror if needed:

http://sleuthkit.sf.net

brian