Linux Forensics Tools Repository: Package Summary for Packages on October 6, 2017:

  • libbde{,-devel,-python,-python3,-tools}-20170902-1.{fc21,fc22,fc23,fc24,fc25,fc26,el7}.{i686,x86_64}.rpm and libbde{,-devel,-python,-tools}-20170902-1.el6.{i686,x86_64}.rpm- Libbde is a library and tools to access the BitLocker Drive Encryption (BDE) format. The BDE format is used by Windows, as of Vista, to encrypt data on a storage media volume.
  • libolecf{,-devel,-python,-python3,-tools}-20170825-1.(fc21,fc22,fc23,fc24,fc25,fc26,el7}.{i686,x86_64}.rpm and libolecf{,-devel,-python,-tools}-20170825-1.el6.{i686,x86_64}.rpm- Libolecf contains libraries and tools to access the OLE 2 Compound File (OLECF) format filed.
  • libvshadow{,-devel,-python,-python3,-tools}-20170902-1.{fc21,fc22,fc23,fc24,fc25,fc26,el7}.{i686,x86_64}.rpm and libvshadow{,-devel,-python,-tools}-20170902-1.el6.{i686,x86_64}.rpm - Libvshadow is a library and tools used to support the Volume Service Snapshot (VSS) format. The VSS format is used by Windows, as of Vista, to maintain copies of data on a storage media volume. This version uses the external version of libbfio to support DFF, the Digital Forensics Framework.
  • pyparsing{,-doc}-2.2.0-1.{el6,el7}.noarch.rpm and python3-pyparsing-2.2.0-1.el7.noarch.rpm - Pyparsing is a module that provides an alternative approach to creating and executing simple grammars, vs. the traditional lex/yacc approach, or the use of regular expressions. The module provides a library of classes that client code uses to construct the grammar directly in Python code. Pyparsing is provided by RedHat for Fedora 21. Pyparsing is needed by plaso.
  • sleuthkit{,-devel,-libs}-4.4.2-1.{fc21,fc22,fc23,fc24,fc25,fc26,el6,el7}.{i686,x86_64}.rpm - The Sleuth Kit (TSK) is a library and collection of command line tools that allow you to investigate volume and file system data. See here for the changes since the last version (4.4.1) released to this repository.
  • libfvde{,-devel,-python,-python3,-tools}-20170930-1.{fc21,fc22,fc23,fc24,fc25,fc26,el7}.{i686,x86_64}.rpm and libfvde{,-devel,-python,-tools}-20170930-1.el6.{i686,x86_64}.rpm - Libfvde is a lbrary and tools to access FileVault Drive Encryption (FVDE) (or FileVault2) encrypted volumes. The FVDE format is used by Mac OS X, as of Lion, to encrypt data on a storage media volume.
  • fmem-kernel-modules-fc25-{i686,x86_64}-1.6-1.42.noarch.rpm - Support for the following kernels were added for Fmem:
    • 4.12.14-200 for FC25

  • lime-kernel-modules-fc25-{i686,x86_64}-1.1.r17-42.noarch.rpm - Support for the following kernels were added for LiME:
    • 4.12.14-200 for FC25

  • fmem-kernel-modules-fc26-{i686,x86_64}-1.6-1.10.noarch.rpm - Support for the following kernels were added for Fmem:
    • 4.13.4-200 for FC26

  • lime-kernel-modules-fc26-{i686,x86_64}-1.1.r17-10.noarch.rpm - Support for the following kernels were added for LiME:
    • 4.13.4-200 for FC26

  • guymager-0.8.7-1.{fc21,fc22,fc23,fc24,fc25,fc26,el6,el7}.{i686,x86_64}.rpm - Guymager is a forensic imaging package. See here for the list of changes.