Software Update: The Sleuth Kit 4.10.1

The program The Sleuth Kit is a collection of forensic tools that can be used to take a closer look at the hard drive. This makes it possible to recover or partially view deleted files. Support for ntfs, fat, exfat, ufs1, ufs2, ext2fs, ext3fs, etx4, hfs, yaffs2, and iso 9660 formats is provided. For more information, please refer to this page. The developers released version 4.10.1 and the changelog since version 4.9.0 looks like this:

The Sleuth Kit 4.10.1

C/C++:

• Changed Windows build to use Nuget for libewf, libvmdk, libvhdi.
• Fixed compiler warnings
• Clarified licenses and added Apache license to distribution
• Improved error handling for out of memory issues
• Rejistry++ memory leak fixes

Java:

• Localized for Japanese

The Sleuth Kit 4.10.0

C/C++:

• Removed PostgreSQL code (that was used only by Java code)
• Added Java callback support so that database inserts are done in Java.

Java:

• Added methods and callbacks as required to allow database population to happen in Java instead of C/C++.
• Added support to allow Autopsy streaming ingest where files are added in batches.
• Added TaggingManager class and concept of a TagSet to support ProjectVic categories.
• Fixed changes to normalization and validation of emails and phone numbers.
• Added a CASE/UCO JAR file that creates JSON-LD based on TSK objects.