sleuthkit-users

[sleuthkit-users] Registry parser Video triage

[HADER C. <in...@ha...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi there,
I have a problem with following third-party-products:

com-williballenthin-autopsy-wrim-3.0.7-20131001.nbm
com-williballenthin-autopsy-wrcv-3.0.7-20131001.nbm

When trying to insert the two files as ingest modules the files are
not recognized and there is no display for installation.

In addition I tried to install video triage. It is recognized, but
there is an error message:

Some plugins require plugin Autopsy-Core to be installed.
The plugin Autopsy-Core is requested in version >= 7.0 (release
version 9) but only 10.0.11 (of release version different from 9) was
found.  The following plugin is affected:       Video Triage

My Autospy-Version:
Product Version: Autopsy 3.1.0_Beta2 (DEVELOPMENT) Sleuth Kit Version:
4.1.3 Netbeans RCP Build: 201306052037 Java: 1.8.0_05; Java
HotSpot(TM) Client VM 25.5-b02 System: Windows XP version 5.1 running
on x86; Cp1252; de_DE (autopsy)

Thanks for help
Joachim
- -- 
HADER Consulting
Dipl. Ing. (FH) Joachim A. Hader
Sachverständiger für EDV und Digitale Forensik
Externer Datenschutzbeauftragter und Datenschutzberater

Moststraße 7 | 91799 Langenaltheim | Tel: 0151 53872750
Email: in...@ha... |WWW: http://www.hader-consulting.de

  Vertraulichkeit, Neutralität, Objektivität sind mein oberstes Gebot

Mitglied der Gesellschaft für Datenschutz und Datensicherheit e.V.
Mitglied des Verbands Europäischer Gutachter und Sachverständiger e.V.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJT5L0XAAoJEBkXzuy9JFgmRawH/AmFGVy6368IuHznDC5t6bCA
Iwd0LwNc6NwISCf/j7asje0a0jtxodw+BCZetPFK8CTnmFQ3gDLFkY3iRt5H4tqd
VkrHAmq4ky88q3esuePJyjlHXtPHmhL3YmSnziZFmCdUB60wnsq7RU8QSzmzEu1U
zNf+A+LiEweNXFVLay6BFTGOVfpJlVBIpJRfqTz5v/qSv/NZkRRfTJpclnc3k0KE
WnMTptqy6e6w98Ht1E5BO/v0GTaub93MJs/HKcMpzDModezfpA9r9/vgRHEEP3v6
8QVkGbRo1DC10p7BUcCugMrfHm+Ux2rE3QK7ucCFihpP7u8PYgnZfm0lcjbLQbI=
=GmH3
-----END PGP SIGNATURE-----

Re: [sleuthkit-users] Registry parser Video triage

[HADER C. <in...@ha...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi there,
why are MD5 hashes of files not displayed in "Views", while they are
displayed in "Data Source"?
Thanks for help
Joachim

> My Autospy-Version: Product Version: Autopsy 3.1.0_Beta2
> (DEVELOPMENT) Sleuth Kit Version: 4.1.3 Netbeans RCP Build:
> 201306052037 Java: 1.8.0_05; Java HotSpot(TM) Client VM 25.5-b02
> System: Windows XP version 5.1 running on x86; Cp1252; de_DE
> (autopsy)



HADER Consulting
Dipl. Ing. (FH) Joachim A. Hader
Sachverständiger für EDV und Digitale Forensik
Externer Datenschutzbeauftragter und Datenschutzberater

Moststraße 7 | 91799 Langenaltheim | Tel: 0151 53872750
Email: in...@ha... |WWW: http://www.hader-consulting.de

  Vertraulichkeit, Neutralität, Objektivität sind mein oberstes Gebot
Mitglied der Gesellschaft für Datenschutz und Datensicherheit e.V.
Mitglied des Verbands Europäischer Gutachter und Sachverständiger e.V.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJT5MXuAAoJEBkXzuy9JFgmEjkH/3sodsw7mmGCBizC6M0bEcmw
u9x0sBA64VGk4i+XZNnBJpMJ6B5p37hhk7RLak9ZnCuqn3dKmqOQZA+TOPGhJQh5
hpR7kSdg90yQ+Wi9rDdp4M88s6P/6W3Ocxy7RQafPgKkAKTCD7Qf2W5cdHW8nPL1
G/b/vbkf0QfS7+zKwfl8AWrrtoRel0hW5z/kyzfb3fSrlGPXjvGxW8BNPGc/JF87
555YKRl9s2ucMHGtR2wcNgsc1vGbtqFpTZFKZGLdaZumn+aoVFH+QxgJpT+KUs3e
tm+2zB98DYiAjFDzJMUpH0HjuS0cuTNceoiHWg2Vb2crb7S0dmEDn0nCtyApEvc=
=75f6
-----END PGP SIGNATURE-----

Re: [sleuthkit-users] Registry parser Video triage

[Brian C. <ca...@sl...>]

Hi Joachim,

That archaic error message is because the modules do not work with Autopsy 3.1.  We (Basis) will be releasing a new video triage module when Autopsy 3.1.0 is officially released (next week).  I wish the error message was more clear.  It comes from the framework that we use.

When we do major updates from 3.0 to 3.1, there will likely be internal API changes and new releases of the modules will be needed.

thanks,
brian



On Aug 8, 2014, at 8:05 AM, HADER Consulting <in...@ha...> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi there,
> I have a problem with following third-party-products:
> 
> com-williballenthin-autopsy-wrim-3.0.7-20131001.nbm
> com-williballenthin-autopsy-wrcv-3.0.7-20131001.nbm
> 
> When trying to insert the two files as ingest modules the files are
> not recognized and there is no display for installation.
> 
> In addition I tried to install video triage. It is recognized, but
> there is an error message:
> 
> Some plugins require plugin Autopsy-Core to be installed.
> The plugin Autopsy-Core is requested in version >= 7.0 (release
> version 9) but only 10.0.11 (of release version different from 9) was
> found.  The following plugin is affected:       Video Triage
> 
> My Autospy-Version:
> Product Version: Autopsy 3.1.0_Beta2 (DEVELOPMENT) Sleuth Kit Version:
> 4.1.3 Netbeans RCP Build: 201306052037 Java: 1.8.0_05; Java
> HotSpot(TM) Client VM 25.5-b02 System: Windows XP version 5.1 running
> on x86; Cp1252; de_DE (autopsy)
> 
> Thanks for help
> Joachim
> - -- 
> HADER Consulting
> Dipl. Ing. (FH) Joachim A. Hader
> Sachverständiger für EDV und Digitale Forensik
> Externer Datenschutzbeauftragter und Datenschutzberater
> 
> Moststraße 7 | 91799 Langenaltheim | Tel: 0151 53872750
> Email: in...@ha... |WWW: http://www.hader-consulting.de
> 
>  Vertraulichkeit, Neutralität, Objektivität sind mein oberstes Gebot
> 
> Mitglied der Gesellschaft für Datenschutz und Datensicherheit e.V.
> Mitglied des Verbands Europäischer Gutachter und Sachverständiger e.V.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
> 
> iQEcBAEBAgAGBQJT5L0XAAoJEBkXzuy9JFgmRawH/AmFGVy6368IuHznDC5t6bCA
> Iwd0LwNc6NwISCf/j7asje0a0jtxodw+BCZetPFK8CTnmFQ3gDLFkY3iRt5H4tqd
> VkrHAmq4ky88q3esuePJyjlHXtPHmhL3YmSnziZFmCdUB60wnsq7RU8QSzmzEu1U
> zNf+A+LiEweNXFVLay6BFTGOVfpJlVBIpJRfqTz5v/qSv/NZkRRfTJpclnc3k0KE
> WnMTptqy6e6w98Ht1E5BO/v0GTaub93MJs/HKcMpzDModezfpA9r9/vgRHEEP3v6
> 8QVkGbRo1DC10p7BUcCugMrfHm+Ux2rE3QK7ucCFihpP7u8PYgnZfm0lcjbLQbI=
> =GmH3
> -----END PGP SIGNATURE-----
> 
> ------------------------------------------------------------------------------
> Want fast and easy access to all the code in your enterprise? Index and
> search up to 200,000 lines of code with a free copy of Black Duck
> Code Sight - the same software that powers the world's largest code
> search on Ohloh, the Black Duck Open Hub! Try it now.
> http://p.sf.net/sfu/bds
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org

Re: [sleuthkit-users] Registry parser Video triage

[Jason L. <jle...@ba...>]

Hi Joachim - 

The 3.1 beta has some API changes that makes the current release versions of those modules incompatible with the new 3.1 release.  The Video Triage module will be updated when the final 3.1 release is available so that it is compatible, but other module developers will need to update their modules as well.

Jason






------------------------------------------------

Jason Letourneau
Product Manager, Digital Forensics
Basis Technology
jle...@ba...
617-386-2000 ext. 152




On Aug 8, 2014, at 8:05 AM, HADER Consulting <in...@ha...> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi there,
> I have a problem with following third-party-products:
> 
> com-williballenthin-autopsy-wrim-3.0.7-20131001.nbm
> com-williballenthin-autopsy-wrcv-3.0.7-20131001.nbm
> 
> When trying to insert the two files as ingest modules the files are
> not recognized and there is no display for installation.
> 
> In addition I tried to install video triage. It is recognized, but
> there is an error message:
> 
> Some plugins require plugin Autopsy-Core to be installed.
> The plugin Autopsy-Core is requested in version >= 7.0 (release
> version 9) but only 10.0.11 (of release version different from 9) was
> found.  The following plugin is affected:       Video Triage
> 
> My Autospy-Version:
> Product Version: Autopsy 3.1.0_Beta2 (DEVELOPMENT) Sleuth Kit Version:
> 4.1.3 Netbeans RCP Build: 201306052037 Java: 1.8.0_05; Java
> HotSpot(TM) Client VM 25.5-b02 System: Windows XP version 5.1 running
> on x86; Cp1252; de_DE (autopsy)
> 
> Thanks for help
> Joachim
> - -- 
> HADER Consulting
> Dipl. Ing. (FH) Joachim A. Hader
> Sachverständiger für EDV und Digitale Forensik
> Externer Datenschutzbeauftragter und Datenschutzberater
> 
> Moststraße 7 | 91799 Langenaltheim | Tel: 0151 53872750
> Email: in...@ha... |WWW: http://www.hader-consulting.de
> 
>  Vertraulichkeit, Neutralität, Objektivität sind mein oberstes Gebot
> 
> Mitglied der Gesellschaft für Datenschutz und Datensicherheit e.V.
> Mitglied des Verbands Europäischer Gutachter und Sachverständiger e.V.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
> 
> iQEcBAEBAgAGBQJT5L0XAAoJEBkXzuy9JFgmRawH/AmFGVy6368IuHznDC5t6bCA
> Iwd0LwNc6NwISCf/j7asje0a0jtxodw+BCZetPFK8CTnmFQ3gDLFkY3iRt5H4tqd
> VkrHAmq4ky88q3esuePJyjlHXtPHmhL3YmSnziZFmCdUB60wnsq7RU8QSzmzEu1U
> zNf+A+LiEweNXFVLay6BFTGOVfpJlVBIpJRfqTz5v/qSv/NZkRRfTJpclnc3k0KE
> WnMTptqy6e6w98Ht1E5BO/v0GTaub93MJs/HKcMpzDModezfpA9r9/vgRHEEP3v6
> 8QVkGbRo1DC10p7BUcCugMrfHm+Ux2rE3QK7ucCFihpP7u8PYgnZfm0lcjbLQbI=
> =GmH3
> -----END PGP SIGNATURE-----
> 
> ------------------------------------------------------------------------------
> Want fast and easy access to all the code in your enterprise? Index and
> search up to 200,000 lines of code with a free copy of Black Duck
> Code Sight - the same software that powers the world's largest code
> search on Ohloh, the Black Duck Open Hub! Try it now.
> http://p.sf.net/sfu/bds
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org