Linux Forensics Tools Repository: Package Summary for Packages on June 14, 2017:

  • fmem-kernel-modules-fc25-{i686,x86_64}-1.6-1.29.noarch.rpm - Support for the following kernels were added for Fmem:
    • 4.11.3-202 for FC25

  • lime-kernel-modules-fc25-{i686,x86_64}-1.1.r17-29.noarch.rpm - Support for the following kernels were added for LiME:
    • 4.11.3-202 for FC25

  • partclone-0.3.6-1.{fc20,fc21,fc22,fc23,fc24,fc25,el6,el7}.{i686,x86_64}.rpm - Partclone is a program similar to the well-known backup utility "Partition Image" a.k.a partimage. Partclone provides utilities to save and restore used blocks on a partition and is designed for higher compatibility of the file system by using existing libraries, e.g. e2fslibs is used to read and write the ext2 partition. The supported file systems are: ext2, ext3, ext4, hfs+, btrfs, ntfs, fat(12/16/32), exfat, xfs, vmfs3 and vmfs5. See the /usr/share/doc/partclone/ChangeLog for the list of changes in this release.
  • exfat-utils-1.2.7-1.{fc20,fc21,fc22,fc23,fc24,fc25,el6,el7}.{i686,x86_64}.rpm - The EXfat-utils are a set of utilities for creating, checking, dumping and labeling exFAT file systems. See here for the list of changes since the last released version (1.2.3).
  • xmount-0.7.5-1.{fc20,fc21,fc22,fc23,fc24,fc25,el6,el7}.{i686,x86_64}.rpm - Xmount is a tool that allows you to convert on-the-fly between multiple input and output harddisk image types. The changes in this version are the following: Here are the changes for this version:
    • New for version 0.7.5
      • Improved and fixed the way fsname is built.
      • Added a patch fixing a bug in libxmount_input_aewf (supplied by Guy Voncken)
    • New for version 0.7.4
      • Re-enabled full OSx support
      • libxmount_input_aewf input library is now able to decompress EWF chunks in parallel, which will increase read speed

  • sleuthkit{,-devel,-libs}-4.4.1-1.{fc20,fc21,fc22,fc23,fc24,fc25,el6,el7}.{i686,x86_64}.rpm - The Sleuth Kit (TSK) is a library and collection of command line tools that allow you to investigate volume and file system data. See here for the changes since the last version (4.4.0) released to this repository.