Luis Filipe Nassif

Non Deleted NTFS files being lost with TSK-4.11.1 java AddImageProcess.run()

2

Hello, We are getting critical messages like this printed in console when processing some NTFS images: ``` org.sleuthkit.datamodel.TskCoreException: Could not find parent (fsObjId: 8, parMetaAddr: 212620, parSeq: 125, parentPath: /Users/Pc/Desktop/XXXXXXX...

Sleuthkit-4.11.1 java library (or some of its dependencies) seems to be messing java system properties

2

Seems TSK, or some of its dependencies, is doing something crazy with java system properties internal map. Most property keys are being cleared and doesn't show up anymore if you...

This is another regression we detected when upgrading from our old fork to TSK-4.11.0 (https://github.com/sepinf-inc/IPED/pull/771) We have some decrypted APFS disk images to process. Although they are decrypted, opening a...

Fix #2699: use block size from parent VolumeSystem when computing offset

Fix #2700: continue loop over next volumes if first volumes fail to open

While upgrading to TSK-4.11.0 in our project (https://github.com/sepinf-inc/IPED/pull/771) I found important regressions when comparing to our fork of the original BlackBag implementation. This relates to a wrong block size being...

UDF FS Support

3

It would be nice to have UDF file system support into TSK.

IPED license terms not being followed

2

Hello, I see this project integrated IPED forensic tool and also borrowed and is using some of its icons. So IPED license (GNU GPL v3 based) must be followed. Simply...

Jars in manifest file not loaded and causes ModuleNotFoundError'>: No module named 'org.apache'

5

First, thank you all for this great project! My app has the following structure: ./app.jar ./lib/lib1.jar ./lib/lib2.jar ... My python script (called by java app) imports some classes from jars...

Merge and fix dynamic metadata types divergences in multicases

6

It is possible that unknown metadata have different detected types in different cases. They should be checked and String could be used if they differ. This can affect sorting and...