TSK 2.07 Released

From Brian Carrier:

Version 2.07 of TSK is now available in source and Win32 executable form:


There are a lot of updates and bug fixes. The summarized list is
below. The executive summary is that there are new flags for ils to find
orphan files and new flags for dls to specify allocation status. There
were a lot of internal updates as well. There were a few NTFS bug fixes
as well and a sorter fix for Cygwin.MD5 (sleuthkit-2.07.tar.gz) = 8165ef1c657e7ebca7a61542f784a04b
MD5 (sleuthkit-win32-2.07.zip) = fc723f5f22ac750b89b96fbefa5f9b75

– Added ‘-p’ flag to ils to find orphan files
– added ‘-a’ and ‘-A’ flags to dls to specify allocation status
– Detect and prevent infinite loops in corrupt directories and FAT
– Updated AFFLIB, libewf, and file
– improved FAT dentry detection (check size)
– new internal fs_read_file()
– Windows visual studio files included with source code
– cleaned up error reporting code
– added caching to FAT code.
– Added a NULL check to fs_inode_free (Michael Cohen)
– Improved ifind_path code so that allocated names are given priority
(Dave Collett)

Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.

Bug Fixes:
– NTFS compression bug with corrupt data
– sanity check to dcat_lib in case the requested number of blocks was too
big. – fs_data lookup bug fixes by Dave Collett. – sorter does not clear
path so it can run under Cygwin – Memory leak fixes in FAT and NTFS.

Leave a Comment

Latest Videos

Digital Forensics News Round-Up, June 19 2024 #dfir #digitalforensics

Forensic Focus 19th June 2024 2:46 pm

Digital Forensics News Round-Up, June 19 2024 #dfir #digitalforensics

Forensic Focus 19th June 2024 2:14 pm

Digital Forensics News Round-Up, June 12 2024 #dfir #digitalforensics

Forensic Focus 12th June 2024 5:51 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feeds settings page to add an API key after following these instructions.

Latest Articles