New changes in Flag-0.35 - bug fixes, including a bug which prevented mysql from starting up in the knoppix-flag version - further enhancements to the network knowledge base reports Overview of changes in Flag-0.34: - Improved network traffic knowledge base framework - Reads and displays registry hives from windows 9x/NT/2K/XP - Tabular time lining of windows internet history files (index.dat) - Support for ethereal 0.9.15 - Various bug fixes and enhancements Overview of changes in Flag-0.3: - Replaced the original CGI interface with a HTTP::Daemon based server - this reduces dependency on apache. - Fixed errors within the framework to allow better debugging of forked children. - Added exgrep - an extracting grep to recover file fragments within - unstructured data (e.g. if the drive had been corrupted or formatted). - Added support to JPG, PNG magic with exgrep. - Improved documentation and manual (almost all features are actually documented). - Added support for browsing windows registry hive files - Build a Knoppix based distribution. - Cleaned up ethereal patch to apply cleanly on ethereal 0.9.13. Should be more maintainable now. Overview of version Flag-0.2: - Added support for hard disk forensics through the Slueth kit from @stake. - Incorporated into knoppix to produce a self bootable system. - Added support for persistant storage while using the knoppix cd. Overview of version Flag-0.1: - Initial public release.