Tuesday, May 3, 2011

AccessData lança vesão 3.3 do Forensic ToolKit



Com o objetivo principal de suportar dados físicos do iOS, o FTK chega a versão 3.3 trazendo algumas novidades muito interessantes!



O FTK é uma das principais ferramentas de computação forense disponíveis no mercado e está chegando agora na versão 3.3, com algumas correções e novidades que facilitam a vida do perito/investigador: [em inglês]


News:
  • “Upon completion of an export job, the export destination folder will now automatically open up in Windows Explorer to show you the files / folders exported. (55773)”.
  • “Enhanced export functionality to handle export destination paths of more than 248 characters in length. (54302)”.
  • “The New Case Wizard and Additional Analysis dialog box now allow the user to “Do not find find deleted items”. Deleted files will be discovered and processed by default. (44322)”.
  • “At the root of each case folder you will now find a file called EvidenceHistory.log”
  • “New columns added in the file list view for MS Office metadata properties of “Last SavedBy” and “Author”. (54704)”.

FIX:
  • “Case Reviewers are no longer able to see or to know how many items have been marked privileged. (52836)”.
  • “FTK does not support processing evidence images of HFS+ file systems that have a sector size greater than 512 bytes. (52734)”.


Atualize já para a versão 3.3, disponível em http://ftk.accessdata.com/

No comments:

Post a Comment