head 1.2; access; symbols pkgsrc-2023Q4:1.2.0.80 pkgsrc-2023Q4-base:1.2 pkgsrc-2023Q3:1.2.0.78 pkgsrc-2023Q3-base:1.2 pkgsrc-2023Q2:1.2.0.76 pkgsrc-2023Q2-base:1.2 pkgsrc-2023Q1:1.2.0.74 pkgsrc-2023Q1-base:1.2 pkgsrc-2022Q4:1.2.0.72 pkgsrc-2022Q4-base:1.2 pkgsrc-2022Q3:1.2.0.70 pkgsrc-2022Q3-base:1.2 pkgsrc-2022Q2:1.2.0.68 pkgsrc-2022Q2-base:1.2 pkgsrc-2022Q1:1.2.0.66 pkgsrc-2022Q1-base:1.2 pkgsrc-2021Q4:1.2.0.64 pkgsrc-2021Q4-base:1.2 pkgsrc-2021Q3:1.2.0.62 pkgsrc-2021Q3-base:1.2 pkgsrc-2021Q2:1.2.0.60 pkgsrc-2021Q2-base:1.2 pkgsrc-2021Q1:1.2.0.58 pkgsrc-2021Q1-base:1.2 pkgsrc-2020Q4:1.2.0.56 pkgsrc-2020Q4-base:1.2 pkgsrc-2020Q3:1.2.0.54 pkgsrc-2020Q3-base:1.2 pkgsrc-2020Q2:1.2.0.50 pkgsrc-2020Q2-base:1.2 pkgsrc-2020Q1:1.2.0.30 pkgsrc-2020Q1-base:1.2 pkgsrc-2019Q4:1.2.0.52 pkgsrc-2019Q4-base:1.2 pkgsrc-2019Q3:1.2.0.48 pkgsrc-2019Q3-base:1.2 pkgsrc-2019Q2:1.2.0.46 pkgsrc-2019Q2-base:1.2 pkgsrc-2019Q1:1.2.0.44 pkgsrc-2019Q1-base:1.2 pkgsrc-2018Q4:1.2.0.42 pkgsrc-2018Q4-base:1.2 pkgsrc-2018Q3:1.2.0.40 pkgsrc-2018Q3-base:1.2 pkgsrc-2018Q2:1.2.0.38 pkgsrc-2018Q2-base:1.2 pkgsrc-2018Q1:1.2.0.36 pkgsrc-2018Q1-base:1.2 pkgsrc-2017Q4:1.2.0.34 pkgsrc-2017Q4-base:1.2 pkgsrc-2017Q3:1.2.0.32 pkgsrc-2017Q3-base:1.2 pkgsrc-2017Q2:1.2.0.28 pkgsrc-2017Q2-base:1.2 pkgsrc-2017Q1:1.2.0.26 pkgsrc-2017Q1-base:1.2 pkgsrc-2016Q4:1.2.0.24 pkgsrc-2016Q4-base:1.2 pkgsrc-2016Q3:1.2.0.22 pkgsrc-2016Q3-base:1.2 pkgsrc-2016Q2:1.2.0.20 pkgsrc-2016Q2-base:1.2 pkgsrc-2016Q1:1.2.0.18 pkgsrc-2016Q1-base:1.2 pkgsrc-2015Q4:1.2.0.16 pkgsrc-2015Q4-base:1.2 pkgsrc-2015Q3:1.2.0.14 pkgsrc-2015Q3-base:1.2 pkgsrc-2015Q2:1.2.0.12 pkgsrc-2015Q2-base:1.2 pkgsrc-2015Q1:1.2.0.10 pkgsrc-2015Q1-base:1.2 pkgsrc-2014Q4:1.2.0.8 pkgsrc-2014Q4-base:1.2 pkgsrc-2014Q3:1.2.0.6 pkgsrc-2014Q3-base:1.2 pkgsrc-2014Q2:1.2.0.4 pkgsrc-2014Q2-base:1.2 pkgsrc-2014Q1:1.2.0.2 pkgsrc-2014Q1-base:1.2 pkgsrc-2013Q4:1.1.0.2 pkgsrc-2013Q4-base:1.1; locks; strict; comment @# @; 1.2 date 2014.03.13.23.41.31; author pettai; state Exp; branches; next 1.1; commitid 49VGqH5zSdGlXAsx; 1.1 date 2013.10.29.23.33.02; author pettai; state Exp; branches; next ; commitid 9VISiM7dvoQmifbx; desc @@ 1.2 log @(Trimmed down commit message, but it's still huge to be able to cover all releases in this update...) ---------------- VERSION 4.1.3 -------------- - fixed bug that could crash UFS/ExtX in inode_lookup. - More bounds checking in ISO9660 code - Image layer bounds checking - Update version of SQLITE-JDBC - Config file for YAFFS2 spare area - New method in image layer to return names - Yaffs2 cleanup. - Escape all strings in SQLite database - SQlite code uses NTTFS sequence number to match parent IDs ---------------- VERSION 4.1.2 -------------- Core: - TskAutoDB considers not finding a VS/FS a critical error. ---------------- VERSION 4.1.1 -------------- Core: - Added FILE_SHARE_WRITE to all windows open calls. - removed unused methods in CRC code that caused compile errors. - Added NTFS FNAME times to time2 struct in TSK_FS_META to make them easier to access -- should have done this a long time ago! - fls -m and tsk_gettimes output NTFS FNAME times to output for timelines. - hfind with EnCase hashsets works when DB is specified (and not only index) - TskAuto now goes into UNALLOC partitions by default too. - Added support to automatically find all Cellebrite raw dump files given the name of the first image. - Added NTFS sequence to parent address in directory and directory itself. - Updated SQLite code to use sequence when finding parent object ID. ---------------- VERSION 4.1.0 -------------- Core: - Added YAFFS2 support (patch from viaForensics). - Added Ext4 support (patch from kfairbanks) - changed all include paths to be 'tsk' instead of 'tsk3' -- IMPORTANT FOR ALL DEVELOPERS! ---------------- VERSION 4.0.2 -------------- New Features: - Added fiwalk tool from Simson. Not supported in Visual Studio yet. ---------------- VERSION 4.0.1 -------------- New Features: - Can open raw Windows devices with write mode sharing. - More DOS partition types are displayed. - Added fcat tool that takes in file name and exports content (equivalent to using ifind and icat together). - Added new API to TskImgDB that returns hash value associated with carved files. - performance improvements with FAT code (maps and dir_add) - performance improvements with NTFS code (maps) - added AONLY flag to block_walk - Updated blkls and blkcalc to use AONLY flag -- MUCH faster. ---------------- VERSION 4.0.0 -------------- New Features: - Added multithreaded support - Added C++ wrapper classes - Added JNI bindings / Java data model classes - 3314047: Added utf8-specific versions of 'toid' methods for img,vs,fs types - 3184429: More consistent printing of unset times (all zerso instead of 1970) - New database design that allows for multiple images in the same database - GPT volume system tries other sector sizes if first attempt fails. - Added hash calculation and lookup to AutoDB and JNI. - Upgraded SQLite to 3.7.9. - EnCase hash support - Libewf v2 support (it is now non-beta) - First file in a raw split or E01 can be specified and the rest of the files are found. - mactime displays times as 0 if the time is not set (isntead of 1970) - Changed behavior of 'mactime -y' to use ISO8601 format. - Updated HFS+ code from ATC-NY. - FAT orphan file improvements to reduce false positives. - TskAuto better reports errors. @ text @@@comment $NetBSD$ bin/blkcalc bin/blkcat bin/blkls bin/blkstat bin/fcat bin/ffind bin/fiwalk bin/fls bin/fsstat bin/hfind bin/icat bin/ifind bin/ils bin/img_cat bin/img_stat bin/istat bin/jcat bin/jls bin/jpeg_extract bin/mactime bin/mmcat bin/mmls bin/mmstat bin/sigfind bin/sorter bin/srch_strings bin/tsk_comparedir bin/tsk_gettimes bin/tsk_loaddb bin/tsk_recover include/tsk/auto/tsk_auto.h include/tsk/base/tsk_base.h include/tsk/base/tsk_os.h include/tsk/fs/tsk_ext2fs.h include/tsk/fs/tsk_fatfs.h include/tsk/fs/tsk_ffs.h include/tsk/fs/tsk_fs.h include/tsk/fs/tsk_hfs.h include/tsk/fs/tsk_iso9660.h include/tsk/fs/tsk_ntfs.h include/tsk/fs/tsk_yaffs.h include/tsk/hashdb/tsk_hashdb.h include/tsk/img/tsk_img.h include/tsk/libtsk.h include/tsk/tsk_incs.h include/tsk/vs/tsk_bsd.h include/tsk/vs/tsk_dos.h include/tsk/vs/tsk_gpt.h include/tsk/vs/tsk_mac.h include/tsk/vs/tsk_sun.h include/tsk/vs/tsk_vs.h lib/libtsk.la man/man1/blkcalc.1 man/man1/blkcat.1 man/man1/blkls.1 man/man1/blkstat.1 man/man1/ffind.1 man/man1/fls.1 man/man1/fsstat.1 man/man1/hfind.1 man/man1/icat.1 man/man1/ifind.1 man/man1/ils.1 man/man1/img_cat.1 man/man1/img_stat.1 man/man1/istat.1 man/man1/jcat.1 man/man1/jls.1 man/man1/mactime.1 man/man1/mmcat.1 man/man1/mmls.1 man/man1/mmstat.1 man/man1/sigfind.1 man/man1/sorter.1 man/man1/tsk_comparedir.1 man/man1/tsk_gettimes.1 man/man1/tsk_loaddb.1 man/man1/tsk_recover.1 share/tsk/sorter/default.sort share/tsk/sorter/freebsd.sort share/tsk/sorter/images.sort share/tsk/sorter/linux.sort share/tsk/sorter/openbsd.sort share/tsk/sorter/solaris.sort share/tsk/sorter/windows.sort @ 1.1 log @The Sleuth Kit (TSK) is a library and collection of command line tools that allow you to investigate disk images. The core functionality of TSK allows you to analyze volume and file system data. The plug-in framework allows you to incorporate additional modules to analyze file contents and build automated systems. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence. @ text @d6 1 d8 1 d20 1 d32 22 a53 21 include/tsk3/auto/tsk_auto.h include/tsk3/base/tsk_base.h include/tsk3/base/tsk_os.h include/tsk3/fs/tsk_ext2fs.h include/tsk3/fs/tsk_fatfs.h include/tsk3/fs/tsk_ffs.h include/tsk3/fs/tsk_fs.h include/tsk3/fs/tsk_hfs.h include/tsk3/fs/tsk_iso9660.h include/tsk3/fs/tsk_ntfs.h include/tsk3/hashdb/tsk_hashdb.h include/tsk3/img/tsk_img.h include/tsk3/libtsk.h include/tsk3/tsk_incs.h include/tsk3/vs/tsk_bsd.h include/tsk3/vs/tsk_dos.h include/tsk3/vs/tsk_gpt.h include/tsk3/vs/tsk_mac.h include/tsk3/vs/tsk_sun.h include/tsk3/vs/tsk_vs.h lib/libtsk3.la d80 7 a86 7 share/tsk3/sorter/default.sort share/tsk3/sorter/freebsd.sort share/tsk3/sorter/images.sort share/tsk3/sorter/linux.sort share/tsk3/sorter/openbsd.sort share/tsk3/sorter/solaris.sort share/tsk3/sorter/windows.sort @