Linux Forensics Tools Repository: Package Summary for Packages on May 9, 2016:

  • fmem-kernel-modules-el6-{i686,x86_64}-1.6-1.21.noarch.rpm - Support for the following kernels were added for Fmem:
    • 2.6.32-573.26.1 for EL6

  • lime-kernel-modules-el6-{i686,x86_64}-1.1.r17-21.noarch.rpm - Support for the following kernels were added for LiME:
    • 2.6.32-573.26.1 for EL6

  • fmem-kernel-modules-fc22-{i686,x86_64}-1.6-1.30.noarch.rpm - Support for the following kernels were added for Fmem:
    • 4.4.8-200 for FC22

  • lime-kernel-modules-fc22-{i686,x86_64}-1.1.r17-30.noarch.rpm - Support for the following kernels were added for LiME:
    • 4.4.8-200 for FC22

  • libewf{-devel,-tools,-python}-2014060801-1.{fc20,fc21,fc22,fc23,el6,el7}.{i686,x86_64}.rpm, ewftools-2014060801-1.{fc20,fc21,fc22,fc23,el6,el7}.{i686,x86_64}.rpm - Libewf supports Expert Witness Compression Format (EWF) formatted files. It supports both the SMART (EWF-S01) and EnCase (EWF-E01) format. Libewf allows you to read and write EWF files. Recent versions also support the LEV (EWF-L01) format. These packages have been installed in the forensics-test repository. To use this repository, you will need to enable it with this command: sudo yum-config-manager --enable forensics-test.
  • sleuthkit{,-devel,-libs}-4.2.0-4.{fc20,fc21,fc22,fc23,el6,el7}.{i686,x86_64}.rpm - The Sleuth Kit (TSK) is a library and collection of command line tools that allow you to investigate volume and file system data. This release was brought up to current with the version of code in github dated 2015-10-07. Also, the code for srch_strings was reverted to the 4.1.3 version, fixing the double free error. These packages have been installed in the forensics-test repository. To use this repository, you will need to enable it with this command: sudo yum-config-manager --enable forensics-test. Note: if you install libewf-2014060801 you will need this version of The Sleuth Kit.