关于Ex01和EnCase 6.19的小道消息


1. We are releasing EnCase v6.19 with the next day or so that will support the new Ex01 format. This will enable v6 users to also read the new v7 evidence files.
2. EnCase v6 and v7 can both still create legacy E01 files. We are not removing that functionality from any EnCase product, but are recommending the new Ex01 format as it maintains all of the security of the old format but is faster and can support encryption of the stored data.
3. Since the initial release of EnCase v7, we have found a way to make the reading of the new Ex01 file even faster. We will be putting out a patch to v7 within a day or so that will significantly boost the read performance of the new files.
4. We are currently finalizing the open spec for Ex01 and will be publishing is shortly. We believe that this new file format is significant improvement over the legacy E01 format that has served us very well for over 10 years, and we encourage others to take advantage of these improvements.

原文地址:https://www.cnblogs.com/ysun/p/2144921.html