mstoeck3/autopsy-flatpak
1
0
Fork 0
mirror of https://github.com/overcuriousity/autopsy-flatpak.git synced 2025-07-06 21:00:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

minor updates

Browse Source
This commit is contained in:
Brian Carrier 2018-05-08 10:20:12 -04:00
parent e5955ac542
commit a96f56511e
2 changed files with 12 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
NEWS.txt
View File

@ -1,23 +1,26 @@
---------------- VERSION 4.7.0 --------------
New Features:
- A graph visualization was added to the Communications tool to make it easier to find messages and relationships.
- A new Application content viewer provides custom views of media files, SQLite files, and Plists.
- A data source processor that runs Volatility was added to support ingesting memory images.
- Reports (e.g., RegRipper output) generated by ingest modules are now indexed for keyword search.
- Passwords to open password protected archive files can be entered.
- PhotoRec carving module can be configured to keep corrupted files.
- Filters to reduce files processed by ingest modules can have data range conditions.
- A new "Application" content viewer (lower right) that will contain file-type specific viewers (to reduce number of tabs).
- New viewer for SQLite databases (in Application content viewer)
- New viewer for binary PLists (in Appilcation content viewer)
- L01 files can be imported as data sources.
- Block size can be supplied for local drives and for images for which SleuthKit auto detect fails.
- Ingest filters can now use date range conditions for triage.
- Passwords to open password protected archive files can be entered (by right clicking on the file).
- Reports (e.g., RegRipper output) generated by ingest modules are now indexed for keyword search.
- PhotoRec carving module can be configured to keep corrupted files.
- Sector size can be specified for local drives and images when E01 is wrong or it is a raw image.
- New data source processor in Experimental module that runs Volatility, adds the outputs as files, and parses the reports to provide INTERESTING_FILE artifacts.
- Assorted small enhancements are included.
Bug Fixes:
- Memory leaks and other issues revealed by fuzzing the SleuthKit have
- Memory leaks and other issues revealed by fuzzing the The Sleuth Kit have
been fixed.
- Result views (upper right) and content views (lower right) stay in synch when switching result views.
- Concurrency bugs in the ingest tasks scheduler have been fixed.
- Assorted small bug fixes are included.
---------------- VERSION 4.6.0 --------------
New Features:
- A new Message content viewer was added to make it easier to view email message contents.

1
Running_Linux_OSX.txt
View File

@ -43,3 +43,4 @@ Autopsy depends on a specific version of The Sleuth Kit. You need the Java libr
* Limitations (Updated May 2018) *
- Timeline does not work on OS X
- Video thumbnails are not generated (need to get a consistent version of OpenCV)
- VHD and VMDK files not supported on OS X