近日，Guidance Software发布了知名取证软件EnCase v6的更新版本，版本号为v6.19.6
此次主要更新的内容包括
- 在加载4K扇区硬盘时，EnCase失去响应
- Copy/Unerase以及Copy Folder功能导出文件夹时导出错误的RMS内容
- 更新了Outside In 2012年7月的安全更新
具体信息参见后附原文：
——————————————————————
EnCase Version 6.19.6
Thank you for using Guidance Software products.
The Release Notes for this version of EnCase contain important information regarding your
EnCase application. Before you install, we recommend that you read these Release Notes to
better understand the changes we have made.
Items Fixed
50663: EnCase stops responding when adding evidence with 4KB sectors.
50667: Copy/Unerase and Copy Folders functions export corrupted RMS content.
51232: Outside In July 2012 security update has been applied.
51247: Reuse of the encase.hash set results in incorrect hash matching.
Guidance Software Product Compatibility
Tables
The Support Portal contains a list of version-to-version compatibility tables for all Guidance
Software products at https://support.guidancesoftware.com/matrix.
FDCC Compliance
Guidance Software's EnCase product has been validated as FDCC compliant using these
versions of NIST VHD images:
1/5/10 (for XP)
10/19/09 (for Vista)
EnCase was tested using Retina Network Security Scanner, which is an NIST validated FDCC
scanner (http://nvd.nist.gov/fdcc/download_fdcc.cfm).