O FTK é uma das principais ferramentas de computação forense disponíveis no mercado e está chegando agora na versão 3.3, com algumas correções e novidades que facilitam a vida do perito/investigador: [em inglês]
News:
- “Upon completion of an export job, the export destination folder will now automatically open up in Windows Explorer to show you the files / folders exported. (55773)”.
- “Enhanced export functionality to handle export destination paths of more than 248 characters in length. (54302)”.
- “The New Case Wizard and Additional Analysis dialog box now allow the user to “Do not find find deleted items”. Deleted files will be discovered and processed by default. (44322)”.
- “At the root of each case folder you will now find a file called EvidenceHistory.log”
- “New columns added in the file list view for MS Office metadata properties of “Last SavedBy” and “Author”. (54704)”.
FIX:
- “Case Reviewers are no longer able to see or to know how many items have been marked privileged. (52836)”.
- “FTK does not support processing evidence images of HFS+ file systems that have a sector size greater than 512 bytes. (52734)”.
Atualize já para a versão 3.3, disponível em http://ftk.accessdata.com/
No comments:
Post a Comment