From 9ce7f414c70426b43112f23296a4cf9ce7429752 Mon Sep 17 00:00:00 2001 From: Brian Carrier <carrier@sleuthkit.org> Date: Wed, 1 Oct 2008 21:27:10 +0000 Subject: [PATCH] Updated docs --- docs/Makefile.am | 2 +- docs/nsrl.txt | 25 ------------------------- docs/ref_fs.txt | 2 ++ docs/ref_timeline.txt | 2 ++ docs/skins_fat.txt | 13 ++++++++----- docs/skins_iso9660.txt | 1 + docs/skins_ntfs.txt | 15 +++++++++------ docs/skins_windows.txt | 2 ++ 8 files changed, 25 insertions(+), 37 deletions(-) delete mode 100644 docs/nsrl.txt diff --git a/docs/Makefile.am b/docs/Makefile.am index 1860598e1..e5bed6884 100644 --- a/docs/Makefile.am +++ b/docs/Makefile.am @@ -1,2 +1,2 @@ -EXTRA_DIST = nsrl.txt other.txt ref_fs.txt ref_timeline.txt \ +EXTRA_DIST = other.txt ref_fs.txt ref_timeline.txt \ skins_fat.txt skins_iso9660.txt skins_ntfs.txt skins_windows.txt diff --git a/docs/nsrl.txt b/docs/nsrl.txt deleted file mode 100644 index 3a80ef152..000000000 --- a/docs/nsrl.txt +++ /dev/null @@ -1,25 +0,0 @@ - NSRL Removal Notes - Sleuth Kit Reference Document - http://www.sleuthkit.org - - Brian Carrier - Last Updated: Aug 25, 2003 - - -The NSRL functionality has been temporarily removed from 'sorter' -(and therefore Autopsy) until it can be better determined as to how -to identify the known good and known bad files in it. It was -originally thought that only software from a box was included in -the NSRL and therefore everything could be trusted. This was false -and there are other types of hashes in it from "Hacker Tools" and -maybe rootkits in the future. - -This problem is not easily solved because there is not a clear -taxonomy of categories in the NSRL. There are 100 different -categories that tools fall into and one of which is "hacker tools". -I do not want to maintain a database of what should be "good" and -what should be "bad", so until a more scalable solution is identified -(besides having the user select good vs bad for 100 categories), -the functionality has been removed. - -brian diff --git a/docs/ref_fs.txt b/docs/ref_fs.txt index 6baded42c..b97958cbd 100644 --- a/docs/ref_fs.txt +++ b/docs/ref_fs.txt @@ -288,4 +288,6 @@ analyzed. http://foremost.sourceforge.net ----------------------------------------------------------------------- +Send documentation updates to: <doc-updates at sleuthkit dot org> + Copyright (c) 2002-2005 by Brian Carrier. All Rights Reserved diff --git a/docs/ref_timeline.txt b/docs/ref_timeline.txt index b9652bfad..bdfde0d7f 100644 --- a/docs/ref_timeline.txt +++ b/docs/ref_timeline.txt @@ -155,4 +155,6 @@ line. http://www.sleuthkit.org/autopsy ----------------------------------------------------------------------- +Send documentation updates to: <doc-updates at sleuthkit dot org> + Copyright (c) 2002-2008 by Brian Carrier. All Rights Reserved diff --git a/docs/skins_fat.txt b/docs/skins_fat.txt index bbcc1b148..39ba42cab 100644 --- a/docs/skins_fat.txt +++ b/docs/skins_fat.txt @@ -1,9 +1,10 @@ - The FAT File System - Sleuth Kit Implementation Notes (SKINs) - http://www.sleuthkit.org + The FAT File System - Brian Carrier - Last Updated: June 2003 + Sleuth Kit Implementation Notes (SKINs) + http://www.sleuthkit.org + + Brian Carrier + Last Updated: Sept 2008 @@ -118,4 +119,6 @@ The FAT spec can be found at: http://www.microsoft.com/whdc/system/platform/firmware/fatgen.mspx ----------------------------------------------------------------------------- +Send documentation updates to: <doc-updates at sleuthkit dot org> + Copyright (c) 2002-2008 by Brian Carrier. All Rights Reserved diff --git a/docs/skins_iso9660.txt b/docs/skins_iso9660.txt index bece91c84..bf2f5ae11 100644 --- a/docs/skins_iso9660.txt +++ b/docs/skins_iso9660.txt @@ -134,3 +134,4 @@ with ISO9660: - Files that are stored with an interleave gap ----------------------------------------------------------------- +Send documentation updates to: <doc-updates at sleuthkit dot org> diff --git a/docs/skins_ntfs.txt b/docs/skins_ntfs.txt index 6a061de5f..0dab9ee6d 100644 --- a/docs/skins_ntfs.txt +++ b/docs/skins_ntfs.txt @@ -1,9 +1,10 @@ - The NTFS File System - Sleuth Kit Implementation Notes (SKINs) - http://www.sleuthkit.org + The NTFS File System - Brian Carrier - Last Updated: Sept 2008 + Sleuth Kit Implementation Notes (SKINs) + http://www.sleuthkit.org + + Brian Carrier + Last Updated: Sept 2008 @@ -227,7 +228,9 @@ with NTFS: exact ACLs of the object can not be displayed. - Directories that are indexed by a descriptor other than the file name, are not supported. -- Compressed & encrypted files are not supported +- Encrypted files are not supported ----------------------------------------------------------------- +Send documentation updates to: <doc-updates at sleuthkit dot org> + Copyright (c) 2002-2008 by Brian Carrier. All Rights Reserved diff --git a/docs/skins_windows.txt b/docs/skins_windows.txt index eafecdbb0..ee8ef0023 100644 --- a/docs/skins_windows.txt +++ b/docs/skins_windows.txt @@ -55,4 +55,6 @@ GetCommandLineW() instead of using wmain() because mingw does not support wmain(). ----------------------------------------------------------------------- +Send documentation updates to: <doc-updates at sleuthkit dot org> + Copyright (c) 2006-2008 by Brian Carrier. All Rights Reserved -- GitLab