Daily Blog #115: Updates

Updates by David Cowen - Hacking Exposed Computer Forensics Blog

Hello reader,
quick one today from my cell phone as my kids are passed out from a day of fun. We have been working on the ntfs and hfs+ parsers and will have updates posted soon.

HFS+ - mainly bug fixes but also some performance gains.

ntfs - big rewrite of our parsing engine to overlay changes on a virtual mft so we can associate as many non USN attribute changes as possible. This is an important next step for us.

lastly we are working with a developer to port the tsk API to perl. Once completed we will place the module on cpan. This means future versions of the parser will be able to access images directly.

Post a Comment