autopsy

Autopsy 4 http://www.sleuthkit.org/ 2016年3月15日 概述 Autopsy 是 The Sleuth Kit 及其他开源数字取证工具的图形界面。 Autopsy 3 是从 Autopsy 2 完全重写而来，使其基于 Java。 Autopsy 4 在 Autopsy 3 的基础上进行了改进，支持多个用户在同一案件上协作。 尽管 Autopsy 被设计为跨平台（Windows、Linux、MacOSX），但当前版本仅在 Windows 上功能完整且经过全面测试。 我们已在 XP、Vista 和 Windows 7 上运行过，未遇到任何问题。...

sleuthkit

The Sleuth Kit 简介 The Sleuth Kit 是一个开源的取证工具包，用于分析 Microsoft 和 UNIX 文件系统及磁盘。The Sleuth Kit 使调查人员能够识别并恢复在事件响应期间获取的镜像或来自活动系统的证据。The Sleuth Kit 是开源的，允许调查人员验证工具的行为或根据特定需求对其进行定制。 The Sleuth Kit 使用了 The Coroner's Toolkit TCT 的文件系统分析工具代码，该工具由 Wietse Venema 和 Dan Farmer 编写。TCT 代码经过修改以实现平台无关性。此外，还添加了对...

scalpel

自 6/27/2013 起，Scalpel 已在 Apache 2.0 许可证下发布， 源代码可在 The Sleuth Kit 的 GitHub 仓库中获取。 它并未得到积极维护。Autopsy 团队曾开始尝试 通过 Java/JNI 绑定将其紧密集成，但遇到了 若干内存泄漏问题，之后该工作被放弃。 目前没有任何官方发布。你可以提交拉取请求， 但可能还需要一段时间才能得到审查。 Scalpel 是一款运行于 Linux 和 Windows 上的文件雕刻与索引应用程序。Scalpel 的第一个版本于 2005 年发布， 基于 Foremost 0.69。自上一次公开版本 1.60...

AZL-82001 CVE-2026-40026 affecting package sleuthkit for versions less than 4.12.1-2

The Sleuth Kit through 4.14.0 contains an out-of-bounds read vulnerability in the ISO9660 filesystem parser where the parsesusp function trusts lenid, lendes, and lensrc fields from the disk image to memcpy data into a stack buffer without verifying that the source data falls within the parsed SU...

AZL-82007 CVE-2026-40024 affecting package sleuthkit for versions less than 4.12.1-2

The Sleuth Kit through 4.14.0 contains a path traversal vulnerability in tskrecover that allows an attacker to write files to arbitrary locations outside the intended recovery directory via crafted filenames or directory paths with path traversal sequences in a filesystem image. An attacker can...

EUVD-2018-3759

Malware in sbrugna...

EUVD-2007-4178

Malware in sbrugna...

EUVD-2007-4179

Malware in sbrugna...

EUVD-2018-11186

Malware in sbrugna...

EUVD-2018-3756

Malware in sbrugna...

EUVD-2018-3758

Malware in sbrugna...

EUVD-2018-3757

Malware in sbrugna...

EUVD-2017-5273

Malware in sbrugna...

EUVD-2019-5702

Malware in sbrugna...

EUVD-2019-5701

Malware in sbrugna...

EUVD-2020-2691

Malware in sbrugna...

OESA-2025-2105 sleuthkit security update

The Sleuth Kit previously known as TASK is a collection of UNIX-based command line file system forensic tools that allow an investigator to examine NTFS, FAT, FFS, EXT2FS, EXT3FS and ExFAT file systems of a suspect computer in a non-intrusive fashion. The tools have a layer-based design and can...

Linux Distros Unpatched Vulnerability : CVE-2018-11740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libtskbase.a in The Sleuth Kit TSK from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the...

Linux Distros Unpatched Vulnerability : CVE-2018-11738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in libtskfs.a in The Sleuth Kit TSK from release 4.0.2 through to 4.6.1. An out- of-bounds read of a memory region was found in the...

Linux Distros Unpatched Vulnerability : CVE-2018-19497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In The Sleuth Kit TSK through 4.6.4, hfscattraverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause ...