AArch64 | |
ppc64le | |
s390x | |
x86-64 |
- update to 4.12.0 * Add Linux LVM support * Logical File System support (a folder structure is parsed by TSK libraries) * Many small fixes - update to 4.11.1 * C/C++: * Several fixes from @joachimmetz * NTFS Decompression bug fix from @kastonework and @uckelman-sf * Java: * Fixed connection leak when making OS Accounts in bridge * OsAccount updates for instance types and special Windows SIDs Fixed issue with duplicate value in Japanese timeline translation - update to 4.11.0 * C/C++: * Added checks at various layers to detect encrypted file systems and disks to give more useful error messages. * Added checks to detect file formats that are not supported (such as AD1, ZIP, etc.) to give more useful error messages. * Added tsk_imageinfo tool that detects if an image is supported by TSK and if it is encrypted. * Add numerous bound checks from @joachimmetz * Clarified licenses as pointed out by @joachimmetz * Java: * Updated from Schema 8.6 to 9.1. * Added tables and classes for OS Accounts and Realms (Domains). * Added tables and classes for Host Addresses (IP, MAC, etc.). * Added tables and classes for Analysis Results vs Data Artifacts by adding onto BlackboardArtifacts. * Added tables and classes for Host and Person to make it easier to group data sources. * Added static types for standard artifact types. * Added File Attribute table to allow custom information to be stored for each file. * Made ordering of getting lock and connection consistent. * Made the findFile methods more efficient by using extension (which is indexed). - add 0001-build-support-libewf-V3.patch to support the experimental release branch of libewf - add sleuthkit-4.12.0_add-missing-include-file.patch
- update to 4.10.2: * C/C++ * Added support for Ext4 inline data * Java * New Blackboard Artifacts for ALEAPP/ILEAPP, Yara, Geo Area, etc. * Upgraded to PostgreSQL JDBC Driver 42.2.18 * Added SHA256 to files table in DB and added utility calculation methods. * Changed TimelineManager to make events for any artifact with a time stamp * Added Japanese translations * Fixed synchronization bug in getUniquePath
- fix overly picky Buildrequires statement
- update Buildrequires line for libewf - all libyal packages have been updated from github
- update to 4.10.1: * Changed Windows build to use Nuget for libewf, libvmdk, libvhdi. * Fixed compiler warnings * Clarified licenses and added Apache license to distribution * Improved error handling for out of memory issues * Rejistry++ memory leak fixes - spec-cleaner
- Update spec file to call for libewf version 0~20140811 * Newer versions of libewf are experimental and not to be used in production
- Update to 4.10.0: * C/C++: - Removed PostgreSQL code (that was used only by Java code) - Added Java callback support so that database inserts are done in Java. * Java: - Added methods and callbacks as required to allow database population to happen in Java instead of C/C++. - Added support to allow Autopsy streaming ingest where files are added in batches. - Added TaggingManager class and concept of a TagSet to support ProjectVic categories. - Fixed changes to normalization and validation of emails and phone numbers. - Added a CASE/UCO JAR file that creates JSON-LD based on TSK objects.
- Update to 4.9.0: * C/C++ - Removed framework project. Use Autopsy instead if you need an analysis framework. - Various fixes from Google-based fuzzing. - Ensure all reads (even big ones) are sector aligned when reading from Windows device. - Ensure all command line tools support new pool command line arguments. - Create virtual files for APFS unallocated space - HFS fix to display type * Java: - More artifact helper methods - More artifacts and attributes for drones and GPS coordinates - Updated TimelineManager to insert GPS artifacts into events table