@bcarrier bcarrier released this Aug 8, 2018 · 27 commits to develop since this release

Assets 7

C/C++ Code:

  • Various compiler warning fixes
  • Added small delay into image writer to not starve other threads

Java:

  • Added more locking to ensure that handles were not closed while other threads were using them.
  • Added APIs to support more queries by data source
  • Added memory-based caching when detecting if an object has children or not.

@bcarrier bcarrier released this May 8, 2018 · 166 commits to develop since this release

Assets 7

C/C++ Code:

  • Lots of bounds checking fixes from Google's fuzzing tests. Thanks Google.
  • Cleanup and fixes from uckelman-sf and others
  • PostgreSQL, libvhdi, & libvmdk are supported for Linux / OS X
  • Fixed display of NTFS GUID in istat - report from Eric Zimmerman.
  • NTFS istat shows details about all FILE_NAME attributes, not just the first. report from Eric Zimmerman.

Java:

  • Reports can be URLs
  • Reports are Content
  • Added APIs for graph view of communications
  • JNI library is extracted to name with user name in it to avoid conflicts

Database:

  • Version upgraded from to 8.0 because Reports are now Content

@bcarrier bcarrier released this Feb 21, 2018 · 393 commits to develop since this release

Assets 6

New Features

  • New Communications related Java classes and database tables.
  • Java build updates for Autopsy Linux build
  • Blackboard artifacts are now Content objects in Java and part of tsk_objects table in database.
  • Increased cache sizes.
  • Lots of bounds checking fixes from Google's fuzzing tests. Thanks Google.
  • HFS fix from uckelman-sf.

@bcarrier bcarrier released this Oct 16, 2017 · 717 commits to develop since this release

Assets 6

New Features:

  • Support for LZVN compressed HFS files (from Joel Uckelman)
  • Use sector size from E01 (helps with 4k sector sizes)
  • More specific version number of DB schema
  • New Local Directory type in DB to differentiate with Virtual Directories
  • All blackboard artifacts in DB are now 'content'. Attachments can now be children of their parent message.
  • Added extension as a column in tsk_files table.

Bug Fixes:

  • Faster resolving of HFS hard links
  • Lots of fixes from Google Fuzzing efforts.

@bcarrier bcarrier released this Aug 7, 2017 · 989 commits to develop since this release

Assets 6

New Features:

  • usnjls tool for NTFS USN log (from noxdafox)
  • Added index to mime type column in DB
  • Use local SQLite3 if it exists (from uckelman-sf)
  • Blackboard Artifacts have a shortDescription metho

Bug Fixes:

  • Fix for highest HFS+ inum lookup (from uckelman-sf)
  • Fix ISO9660 crash
  • various performance fixes and added thread safety checks

@bcarrier bcarrier released this May 30, 2017 · 1082 commits to develop since this release

Assets 6
sleuthkit-4.4.1

Tag for release sleuthkit-4.4.1

@bcarrier bcarrier released this Jan 18, 2017 · 1276 commits to develop since this release

Assets 6
Tag for release sleuthkit-4.4.0
Nov 1, 2016
Fixed typo in TskIsImageSupported
Oct 25, 2016
Tag for release 4.3.1

@bcarrier bcarrier released this Jul 20, 2016 · 1465 commits to develop since this release

Assets 6
Tag for release sleuthkit-4.3.0