[DFNews] Guidance Software推出EnCase AppCentral应用商店.doc

[DFNews] Guidance推出EnCase v7.06以及EnCase Imager 7.06 Posted on 2013-03-05 20:40 YiDiscovery 阅读(579) 评论(0) 编辑 收藏 电子数据取证软件厂商Guidance Software Inc近日将旗下著名计算机取证软件EnCase v7更新至 v7.06，此次更新有较大变动，其中加入了原SAFE版本中包含的部分功能 同时推出免费证据获取工具EnCase Forensic Imager （模仿FTK Imager？） 以下是EnCase v7.06更新Release Note： ? ? New Features Support for Macintosh Logical Volumes EnCase Enterprise now supports logical volumes for Macintosh systems. This feature functions in the same way as EnCase handles Windows logical volumes. When connecting to systems via servlets, the servlet interacts with the operating system to address the volume. Macintosh logical volumes can include single disks, RAIDs, and encrypted volumes. Enhanced Macintosh Artifacts Support Enhanced Macintosh artifacts support in EnCase Version 7.06 includes:  Displaying all HFS+ file system compressed files as( uncompressed  Support for directories hard links(  Support for Finder( information and extended file attributes  Displaying security Access( Control Lists (ACLs) Enhanced Support for Macintosh OS X and Installer EnCase now supports Mac OS X 10.8. This update includes an enhanced Mac installer that supports launchd, a unified, open-source service management framework for starting, stopping and managing daemons, applications, processes, and scripts. Enhanced Support for Macintosh Servlets EnCase now code-signs Macintosh servlets. To use this feature, you must reinstall both the servlet and the driver. This requires uninstalling the old driver and servlet and installing the new Installer.pkg, which includes the new servlet and drivers. Formerly, when using Macintosh servlets, OS X would display a confirmation dialog. With code-signed servlets, this message does not appear. Support for Macintosh Trash Items EnCase now supports Trash items for Mac OS X, including support for multiple types of trash and tracking multiple items with the same filename. Enhanced Windows Support EnCase now provides support for: