Linux Forensics Tools Repository: Package Summary for Packages on November 15, 2014:

  • dfvfs-20141108-1.(fc17,fc18,fc19,fc20,el6,el7}.noarch.rpm - Dfvfs, the Digital Forensics Virtual File System, provides read-only access to file-system objects from various storage media types and file formats. The goal of dfVFS is to provide a generic interface for accessing file-system objects, for which it uses several back-ends that provide the actual implementation of the various storage media types, volume systems and file systems. This version no longer scans VSS snapshot volumes by default.
  • fmem-kernel-modules-fc20-{i686,x86_64}-1.6-1.18.noarch.rpm - Support for the following kernels were added for: Fmem:
    • 3.17.2-200 for FC20

  • lime-kernel-modules-fc20-{i686,x86_64}-1.1.r17-18.noarch.rpm - Support for the following kernels were added for: LiME:
    • 3.17.2-200 for FC20

  • lime-kernel-modules-el6-{i686,x86_64}-1.1.r17-6.noarch.rpm - Support for the following kernels were added for LiME:
    • 2.6.32-504.1.3 for EL6

  • fmem-kernel-modules-el6-{i686,x86_64}-1.6-1.6.noarch.rpm - Support for the following kernels were added for Fmem:
    • 2.6.32-504.1.3 for EL6

  • libesedb-{,devel,python,tools}-20141110-1.(fc17,fc18,fc19,fc20,el5,el6,el7}.{i686,x86_64}.rpm - Libesedb contains a library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format. ESEDB is used in may different applications like Windows Search, Windows Mail, Exchange, Active Directory, etc. See here for the list of changes.
  • ddrutility-2.6-2.{fc17,fc18,fc19,fc20,el6,el7}.{i686,x86_64}.rpm - Ddrutility is meant to be a compliment to gnuddrescue. It is a set of utilities to help with hard drive data rescue. It currently contains the following utilities:

    • ddru_findbad
    • ddru_ntfsbitmap
    • ddru_ntfsfindbad
    • ddru_diskutility
    The change in this release is to reference the correct location of the nfscluster program for CentOS 6.
  • partclone-0.2.71-2.{fc17,fc18,fc19,fc20,el6,el7}.{i686,x86_64}.rpm - Partclone is a program similar to the well-known backup utility "Partition Image" a.k.a partimage. Partclone provides utilities to save and restore used blocks on a partition and is designed for higher compatibility of the file system by using existing libraries, e.g. e2fslibs is used to read and write the ext2 partition. The supported file systems are: ext2, ext3, ext4, hfs+, btrfs, ntfs, fat(12/16/32), and exfat. This release was built to use the latest version of libntfs-3g.so for CentOS.
  • testdisk-6.14-3.2.{fc17,fc18,fc19,fc20,el5,el6,el7}.{i686,x86_64}.rpm - Testdisk is powerful free data recovery software! It was primarily designed to help recover lost partitions and/or make non-booting disks bootable again when these symptoms are caused by faulty software, certain types of viruses or human error (such as accidentally deleting a Partition Table). This package also contains photorec which is a file data recovery software designed to recover lost files including video, documents and archives from hard disks, CD-ROMs, and lost pictures (thus the Photo Recovery name) from digital camera memory. PhotoRec ignores the file system and goes after the underlying data, so it will still work even if your media's file system has been severely damaged or reformatted. This release was built to use the latest version of libntfs-3g.so for CentOS.