Imager_10R2P1_RN IMAGER 3.0.1 RN
Ftkimager Releasenotes 3-0-1 FTKImager_ReleaseNotes_3-0-1 FTKImager_ReleaseNotes_3-0-1 ad
2014-07-03
: Pdf Imager 3.0.1 Rn IMAGER 3.0.1 RN
Open the PDF directly: View PDF 
.
Page Count: 6
| Download | |
| Open PDF In Browser | View PDF |
FTK IMAGER 3.0.1 RELEASE NOTES INTRODUCTION These release notes apply to AccessData FTK Imager 3.0.1. IMPORTANT INFORMATION If the machine running Imager has an active internet connection and you are viewing certain types of HTML or Web pages, there is a potential risk associated with specially crafted pages. These pages may trigger unintended consequences such as running malicious code or scripts. AccessData recommends that, wherever possible, users not have an active internet connection while Imager is running. In addition, please be aware that viewing HTML content in the Imager preview pane when connected to the internet has potential risk. NEW AND IMPROVED Improved handling of Apple partition maps (54804) Imager will now see all available target devices when “Physical Device” is selected. (55618) Better handling of corrupted drives with overlapping and/or invalid partitions. (55703) AccessData Imager 3.0.1Release Notes 1 BUG FIXES Fixed issue that caused segmented AFF image verification to not automatically compare the generated hash values. This issue did not affect the forensic integrity of AFF images or their hash values. (55013) Resolved file name issue that caused E01 files that were created in FTK Imager to fail during import into EnCase. (56047) KNOWN ISSUES Using the "Automate multiple removable media" in Imager at the same time that a 3rd party ISO Mounting utility is running will cause issues with image creation. AccessData recommends that user exit from the utility before using this feature. (55361) COMMENTS? We value all feedback from our customers. Please contact us at support@accessdata.com, or send documentation issues to documentation@accessdata.com. 2 AccessData Imager 3.0.1 Release Notes FTK IMAGER 3.0.0.1443 RELEASE NOTES INTRODUCTION These release notes apply to AccessData FTK Imager 3.0.0.1443 BUG FIXES 64 bit system memory dumps are now being created correctly. (26055) COMMENTS? We value all feedback from our customers. Please contact us at support@accessdata.com, or send documentation issues to documentation@accessdata.com. FTK Imager 3.0.0.1443 Release Notes 3 FTK IMAGER 3.0.0.1442 RELEASE NOTES INTRODUCTION These release notes apply to AccessData FTK Imager 3.0.0.1442 NEW AND IMPROVED A new feature allows users to mount an image as a drive or physical device. Mount E01, S01, and RAW/dd images physically, or mount E01, S01, and RAW/ dd partition images, and AD1, L01 custom content images logically. (19064) FTK Imager 3.0 can now read and create Advanced Forensics Format (AFF) images. (18054) FTK Imager 3.0 now provides support for VXFS, exFAT, and Ext4 file systems. (15593) (16876) (8013) (19349) Safely mount a forensic Image (AFF/DD/RAW/001/E01/S01) as a physical device or logically as a drive letter. Once mounted, the read-only media is available to any 3rd party Windows application and exposes the same file system artifacts as FTK Imager. For example you can mount an HFS+ image, and it will show up as a volume on the examiner's machine in the explorer view. (18593) Virtual mounting options include the ability to: Mount device. physical images (AFF/DD/RAW/001/E01/S01) as only a physical block Mount physical images (AFF/DD/RAW/001/E01/S01) images both at the physical level and logical level. Mount physical images (AFF/DD/RAW/001/E01/S01), and logical image (AD1/L01) custom content images virtually. 4 AccessData Imager 3.0.1 Release Notes Mount NTFS/FAT partitions contained within images as writable block devices. This feature caches sections of a read-only image to a temporary location allowing the user to “write” to the image without comprimising the integrity of the original image. Once mounted via the write cache mount method, the data can then be leveraged by any 3rd party tools which require write access. Note: Disk images mounted using the virtual disk mounting feature will not be listed in the Windows “Disk Management” snap-in. Furthermore, utilities that query the physical disk subsystem for a list of attached disks instead of querying physical disks by name (such as “physical disk 0”) will also not show any of the images as being mounted. KNOWN ISSUES When a segmented AFF image is created using Imager 3.0, although you can mark to include the Verify and Create Directory Listing operations, those operations do not automatically take place. The .AFF files are created in a folder based on the name given to the image to be created. After creation, add the [file_000].aff as evidence to Imager, then click File > Verify Drive/Image, and/ or File > Export Directory Listing to accomplish these tasks. Again, this applies to segmented AFF images, and not to single-file images. (19557) The Image Mounting feature does not mount encrypted images. (21398) Localization is not yet completed for Image Mounting dialogs. “Floppy formatted” images will not be mounted logically. “Floppy formatted” refers to media that doesn't have a partition table (which is present on some removable media cartridges, floppy disks, and flash drives). (21483) Mounting an image with a write-cache uses about 100MB RAM per 1GB of disk space used for the write cache. (21489) COMMENTS? We value all feedback from our customers. Please contact us at support@accessdata.com, or send documentation issues to documentation@accessdata.com. FTK Imager 3.0.0.1442 Release Notes 5 6 AccessData Imager 3.0.1 Release Notes
Source Exif Data:
File Type : PDF File Type Extension : pdf MIME Type : application/pdf PDF Version : 1.5 Linearized : Yes Author : noleson Create Date : 2010:10:06 09:27:38Z Modify Date : 2011:04:05 21:40:37Z Tagged PDF : Yes XMP Toolkit : Adobe XMP Core 4.2.1-c043 52.372728, 2009/01/18-15:08:04 Format : application/pdf Creator : noleson Title : Imager_10R2P1_RN.fm Creator Tool : FrameMaker 9.0 Producer : Acrobat Distiller 9.4.0 (Windows) Document ID : uuid:291d1eb0-2d26-49d8-97d0-5fa1f3c0f740 Instance ID : uuid:68a2c088-6887-4a75-82e5-e5a64925a7a0 Page Mode : UseOutlines Page Count : 6EXIF Metadata provided by EXIF.tools