There is a new version of TSK out. Only a few changes, but I wanted to
get the bug fixes out in the official release.
http://sleuthkit.sourceforge.net/sleuthkit/download.php
MD5: 0826e4b6b3e116a81b40a007d5948e88
(the sleuthkit.org site will be updated later today)
Bug Fixes:
- FAT times were an hour too fast during daylight savings. Now use
mktime() instead of manual calculation. Reported by Randall Shane.
(BUG: 880606)
- Indirect block pointer blocks would not be identified by the ifind
tool. Reported by Knut Eckstein (BUG: 902709)
Updates:
- 'hfind -i' now reports the header entry as an invalid entry. The
first header row was ignored.
- Added fs->seek_pos check to fs_read_random.
brian
|