diff --git a/docs/Makefile.am b/docs/Makefile.am index 1860598e12c886918243af3571210077795fad2b..e5bed688477fe72ec27e7ab71b6e5a99d313fef8 100644 --- a/docs/Makefile.am +++ b/docs/Makefile.am @@ -1,2 +1,2 @@ -EXTRA_DIST = nsrl.txt other.txt ref_fs.txt ref_timeline.txt \ +EXTRA_DIST = other.txt ref_fs.txt ref_timeline.txt \ skins_fat.txt skins_iso9660.txt skins_ntfs.txt skins_windows.txt diff --git a/docs/nsrl.txt b/docs/nsrl.txt deleted file mode 100644 index 3a80ef1527421fbac963b9e22396f99b1ed655ec..0000000000000000000000000000000000000000 --- a/docs/nsrl.txt +++ /dev/null @@ -1,25 +0,0 @@ - NSRL Removal Notes - Sleuth Kit Reference Document - http://www.sleuthkit.org - - Brian Carrier - Last Updated: Aug 25, 2003 - - -The NSRL functionality has been temporarily removed from 'sorter' -(and therefore Autopsy) until it can be better determined as to how -to identify the known good and known bad files in it. It was -originally thought that only software from a box was included in -the NSRL and therefore everything could be trusted. This was false -and there are other types of hashes in it from "Hacker Tools" and -maybe rootkits in the future. - -This problem is not easily solved because there is not a clear -taxonomy of categories in the NSRL. There are 100 different -categories that tools fall into and one of which is "hacker tools". -I do not want to maintain a database of what should be "good" and -what should be "bad", so until a more scalable solution is identified -(besides having the user select good vs bad for 100 categories), -the functionality has been removed. - -brian diff --git a/docs/ref_fs.txt b/docs/ref_fs.txt index 6baded42c2cc5a1e5131f8cbcbfd6125e42ad646..b97958cbd1b59d16701dcfc38ddad44e27fde2ad 100644 --- a/docs/ref_fs.txt +++ b/docs/ref_fs.txt @@ -288,4 +288,6 @@ analyzed. http://foremost.sourceforge.net ----------------------------------------------------------------------- +Send documentation updates to: <doc-updates at sleuthkit dot org> + Copyright (c) 2002-2005 by Brian Carrier. All Rights Reserved diff --git a/docs/ref_timeline.txt b/docs/ref_timeline.txt index b9652bfad7b668eaf309e8a4d4cd5ac2d9af1197..bdfde0d7f8b4f96eb8a05c3d5feffaa6f66d4cb9 100644 --- a/docs/ref_timeline.txt +++ b/docs/ref_timeline.txt @@ -155,4 +155,6 @@ line. http://www.sleuthkit.org/autopsy ----------------------------------------------------------------------- +Send documentation updates to: <doc-updates at sleuthkit dot org> + Copyright (c) 2002-2008 by Brian Carrier. All Rights Reserved diff --git a/docs/skins_fat.txt b/docs/skins_fat.txt index bbcc1b1488d3054dd8b7ae69443e4a942a0ea905..39ba42cab5b2e3f829e27e28991ebdd84729b8bf 100644 --- a/docs/skins_fat.txt +++ b/docs/skins_fat.txt @@ -1,9 +1,10 @@ - The FAT File System - Sleuth Kit Implementation Notes (SKINs) - http://www.sleuthkit.org + The FAT File System - Brian Carrier - Last Updated: June 2003 + Sleuth Kit Implementation Notes (SKINs) + http://www.sleuthkit.org + + Brian Carrier + Last Updated: Sept 2008 @@ -118,4 +119,6 @@ The FAT spec can be found at: http://www.microsoft.com/whdc/system/platform/firmware/fatgen.mspx ----------------------------------------------------------------------------- +Send documentation updates to: <doc-updates at sleuthkit dot org> + Copyright (c) 2002-2008 by Brian Carrier. All Rights Reserved diff --git a/docs/skins_iso9660.txt b/docs/skins_iso9660.txt index bece91c840cc42d594e08d96338e7fe102cc58ce..bf2f5ae11eafc18abefee9e3a16a101df570f526 100644 --- a/docs/skins_iso9660.txt +++ b/docs/skins_iso9660.txt @@ -134,3 +134,4 @@ with ISO9660: - Files that are stored with an interleave gap ----------------------------------------------------------------- +Send documentation updates to: <doc-updates at sleuthkit dot org> diff --git a/docs/skins_ntfs.txt b/docs/skins_ntfs.txt index 6a061de5f1a73a3cc4dc88e4987079045b52e595..0dab9ee6d04ea9928074d8db38e6fe3b4b4ade8c 100644 --- a/docs/skins_ntfs.txt +++ b/docs/skins_ntfs.txt @@ -1,9 +1,10 @@ - The NTFS File System - Sleuth Kit Implementation Notes (SKINs) - http://www.sleuthkit.org + The NTFS File System - Brian Carrier - Last Updated: Sept 2008 + Sleuth Kit Implementation Notes (SKINs) + http://www.sleuthkit.org + + Brian Carrier + Last Updated: Sept 2008 @@ -227,7 +228,9 @@ with NTFS: exact ACLs of the object can not be displayed. - Directories that are indexed by a descriptor other than the file name, are not supported. -- Compressed & encrypted files are not supported +- Encrypted files are not supported ----------------------------------------------------------------- +Send documentation updates to: <doc-updates at sleuthkit dot org> + Copyright (c) 2002-2008 by Brian Carrier. All Rights Reserved diff --git a/docs/skins_windows.txt b/docs/skins_windows.txt index eafecdbb03e5c748f977b8b59dc0c3f382abdfe4..ee8ef00234f4073fbc0870698e320c5c3eea001f 100644 --- a/docs/skins_windows.txt +++ b/docs/skins_windows.txt @@ -55,4 +55,6 @@ GetCommandLineW() instead of using wmain() because mingw does not support wmain(). ----------------------------------------------------------------------- +Send documentation updates to: <doc-updates at sleuthkit dot org> + Copyright (c) 2006-2008 by Brian Carrier. All Rights Reserved