jessekornblum (![[info]](http://l-stat.livejournal.com/img/userinfo.gif){kind=small} jessekornblum) wrote,@ 2007-07-16 23:38:00 |
|
Foremost version 2.0 is coming
After a long break I have once again taken an interest in the active development of Foremost. One of the first major programs I ever wrote, it's a program for extracting files based on their headers and footers. Nick Mikus has been maintaining it for the past two years and has been doing an excellent job. But the time has come for me to step in again. Right now I'm updating the code for version 2.0 which should be ready by the end of the summer.
The biggest (visible) change will be support for the Advanced Forensic Format or AFF. You can read all about it on the Forensics Wiki. It's a library that allows programs to directly access compressed disk images, either in native AFF, EnCase, and EWF formats.
With the advent of CarvFS, this new version of Foremost may not be such an innovation for *nix users. But it should be a boon for Windows users. For the first time Foremost will be available, fully supported, for the Win32 platform. This means you'll be able to download and run a version of Foremost for your Windows box without all of that mucking about with Cygwin. (Don't get me wrong, Cygwin rocks, but it's not always available on an analysis machine.)
What else would you like to see in the new Foremost? I'll be working on the existing feature requests and bugs, but what else do you need?
After a long break I have once again taken an interest in the active development of Foremost. One of the first major programs I ever wrote, it's a program for extracting files based on their headers and footers. Nick Mikus has been maintaining it for the past two years and has been doing an excellent job. But the time has come for me to step in again. Right now I'm updating the code for version 2.0 which should be ready by the end of the summer.
The biggest (visible) change will be support for the Advanced Forensic Format or AFF. You can read all about it on the Forensics Wiki. It's a library that allows programs to directly access compressed disk images, either in native AFF, EnCase, and EWF formats.
With the advent of CarvFS, this new version of Foremost may not be such an innovation for *nix users. But it should be a boon for Windows users. For the first time Foremost will be available, fully supported, for the Win32 platform. This means you'll be able to download and run a version of Foremost for your Windows box without all of that mucking about with Cygwin. (Don't get me wrong, Cygwin rocks, but it's not always available on an analysis machine.)
What else would you like to see in the new Foremost? I'll be working on the existing feature requests and bugs, but what else do you need?
