공장장과 함께하는 디지털 포렌식 이야기

Forensic 조사자의 필수품이었던 Helix의 상용버전인 Helix 3 Pro의 신버전(2009R2)이 출시되었다네요.

기능 추가 사항 

- Ability to save hash values generated in the Hash window  

- Acquisitions now have a single file name for all three output files: chain of custody, log, and image name 
- Helix3 Pro will auto discover the Helix3 Pro Receiver application on the local network 
- Helix3 Pro Receiver can accept more than 1 incoming image at a time  
- Save search results to a log file  
- Automatic verification of image hashes  
- Ability to image RAM on Linux through the /dev/mem device  
- Renamed dropdown item from Helix Pro Server to Helix3 Pro Receiver  
- Added cloning feature to the Helix3 Pro bootable UI  
- Added ability to mount devices from bootable UI  
- Can send volatile data collection results to Helix3 Pro Receiver  
- Log file contains all the output locations  
- Added additional exception handling  
- Automatically detects if the destination location does not have enough space for an image file 
- Hash search result files to ensure integrity when copied  
- Custom 2.6.28 Linux Kernel 
- New targetiscsi ability which auto generates devices and makes them available read only to iscsi initiators 
- Add new user called helix client with password helix for ssh access (sshd auto starts on boot) 
- Added crypt setup to bootable side 
- Added sqlite3 to bootable side 
- Added autopsy 2.21 to bootable side 
- Switched to Ubuntu 9.04 base 
   

수정사항 

- Encoding problems for foreign languages 

- Adjusted bootable side wallpaper to work with all resolutions  
- Adjusted text in the About box  
- Leaving "Copy Files To:" field blank in Search Window causes NilObjectException Error  
- OutOfBoundsException error when sending volatile data to receiver  
- Adjusted the order of collection for all tools to meet order of volatility collection 
- Clicking on stop button doesn't stop Receiver application from receiving data  
- NilObjectException Error when skipping verification of image  
- NilObjectException Error with printing blank COC form  
- Exception when creating the Chain of Custody form  
- Stopping an image being sent to a Receiver causes a NilObjectException Error  
- "User Info" volatile data does nothing  
- Verification fails for image of live device saved to a locally attached storage device  
- Search box highlighted when on the Info screen  
- Fix NilObjectException Error possibility within launcher code  
- NilObjectException Error on Mac 10.4 when launcher and Helix3 Pro start  
- If destination is in path of search folder files copied to destination will be shown in search results  
- Search button is disabled when memory device is selected 

이전다음

012