Skip to content

Commit a96f565

Browse files
committed
minor updates
1 parent e5955ac commit a96f565

File tree

2 files changed

+11
-7
lines changed

2 files changed

+11
-7
lines changed

NEWS.txt

Lines changed: 10 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,23 +1,26 @@
11
---------------- VERSION 4.7.0 --------------
22
New Features:
33
- A graph visualization was added to the Communications tool to make it easier to find messages and relationships.
4-
- A new Application content viewer provides custom views of media files, SQLite files, and Plists.
5-
- A data source processor that runs Volatility was added to support ingesting memory images.
4+
- A new "Application" content viewer (lower right) that will contain file-type specific viewers (to reduce number of tabs).
5+
- New viewer for SQLite databases (in Application content viewer)
6+
- New viewer for binary PLists (in Appilcation content viewer)
7+
- L01 files can be imported as data sources.
8+
- Ingest filters can now use date range conditions for triage.
9+
- Passwords to open password protected archive files can be entered (by right clicking on the file).
610
- Reports (e.g., RegRipper output) generated by ingest modules are now indexed for keyword search.
7-
- Passwords to open password protected archive files can be entered.
811
- PhotoRec carving module can be configured to keep corrupted files.
9-
- Filters to reduce files processed by ingest modules can have data range conditions.
10-
- L01 files can be imported as data sources.
11-
- Block size can be supplied for local drives and for images for which SleuthKit auto detect fails.
12+
- Sector size can be specified for local drives and images when E01 is wrong or it is a raw image.
13+
- New data source processor in Experimental module that runs Volatility, adds the outputs as files, and parses the reports to provide INTERESTING_FILE artifacts.
1214
- Assorted small enhancements are included.
1315

1416
Bug Fixes:
15-
- Memory leaks and other issues revealed by fuzzing the SleuthKit have
17+
- Memory leaks and other issues revealed by fuzzing the The Sleuth Kit have
1618
been fixed.
1719
- Result views (upper right) and content views (lower right) stay in synch when switching result views.
1820
- Concurrency bugs in the ingest tasks scheduler have been fixed.
1921
- Assorted small bug fixes are included.
2022

23+
2124
---------------- VERSION 4.6.0 --------------
2225
New Features:
2326
- A new Message content viewer was added to make it easier to view email message contents.

Running_Linux_OSX.txt

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -43,3 +43,4 @@ Autopsy depends on a specific version of The Sleuth Kit. You need the Java libr
4343
* Limitations (Updated May 2018) *
4444
- Timeline does not work on OS X
4545
- Video thumbnails are not generated (need to get a consistent version of OpenCV)
46+
- VHD and VMDK files not supported on OS X

0 commit comments

Comments
 (0)