sleuthkit - The Sleuth Kit (TSK)

License: CPL and IBM and GPLv2+
The Sleuth Kit (TSK) is a collection of UNIX-based command line tools that
allow you to investigate a computer. The current focus of the tools is the
file and volume systems and TSK supports FAT, Ext2/3, NTFS, UFS,
and ISO 9660 file systems


sleuthkit-4.6.5-1.fc25.x86_64 [1.6 MiB] Changelog by Lawrence R. Rogers (2019-01-15):
- Release 4.6.5-1
	C/C++ Code:
		HFS boundary check fix
	Java Code:
		New artifacts and attributes defined
		Fixed bug in SleuthkitCase.getContentById() for data sources
		Fixed bug in that could allow reading past end of file
	Case Database Schema:
		New fields for hash values and acquisition details in case database
		Store "created schema version" in case database
sleuthkit-4.6.4-1.fc25.x86_64 [1.6 MiB] Changelog by Lawrence R. Rogers (2018-11-09):
- Release 4.6.4-1
	Java Code:
		Increase max statements in database to prevent errors under load
		Have a max timeout for SQLite retries
sleuthkit-4.6.3-1.fc25.x86_64 [1.6 MiB] Changelog by Lawrence R. Rogers (2018-10-14):
- Release 4.6.3-1
	C/C++ Code:
		Hashdb bug fixes for corrupt indexes and 0 hashes
		New code for testing power of number in ExtX code
	Java Code:
		New class that allows generic database access
		New methods that check for duplicate artifacts
		Added caches for frequently used content
	Database Schema:
		Added Examiner table
		Tags are now associated with Examiners
		Changed parent_path for logical files to be consistent with FS files.
sleuthkit-4.6.2-2.fc25.x86_64 [1.6 MiB] Changelog by Lawrence R. Rogers (2018-10-03):
- Release 4.6.2-2
	Built with Java support. Release number is greater than the release for Fedora 28 and 27.
sleuthkit-4.6.0-3.fc25.x86_64 [1.5 MiB] Changelog by Lawrence R. Rogers (2018-03-28):
- Release 4.6.0-3
	Moved sleuthkit-4.6.0.jar from sleuthkit-devel package to sleuthkit package.
sleuthkit-4.6.0-1.fc25.x86_64 [1.1 MiB] Changelog by Lawrence R. Rogers (2018-02-21):
- Release 4.6.0-1
	- New Features
		- New Communications related Java classes and database tables.
		- Java build updates for Autopsy Linux build
		- Blackboard artifacts are now Content objects in Java and part of tsk_objects table in database.
		- Increased cache sizes.
		- Lots of bounds checking fixes from Google's fuzzing tests.  Thanks Google.
		- HFS fix from uckelman-sf.
sleuthkit-4.5.0-1.fc25.x86_64 [1.1 MiB] Changelog by Lawrence R. Rogers (2017-10-15):
- Release 4.5.0-1

	- New Features:
		- Support for LZVN compressed HFS files (from Joel Uckelman)
		- Use sector size from E01 (helps with 4k sector sizes)
		- More specific version number of DB schema
		- New Local Directory type in DB to differentiate with Virtual Directories
		- All blackboard artifacts in DB are now 'content'. Attachments can now be children of their parent message.
		- Added extension as a column in tsk_files table.

	- Bug Fixes:
		- Faster resolving of HFS hard links
		- Lots of fixes from Google Fuzzing efforts.

Listing created by Repoview-0.6.6-1.el6