This enables recovery of files from a quick-formatted volume Added support for recovering files from carved MFT records.Added support for carving MFT file records on non-NTFS quick formatted volumes.Thumbnail Tab, added a quality level indicator to the thumbnails preview.Lowered priority level of carving threads to improve response from computer when carving is in progress.Disabled sorting while deleted file scan is in progress.Added secondary sorting on second column (via dropdown and/or control click on details tab).File carving, improved MP3/JPG detection to cut down on the number of false positive results returned.File carving, fixed possible crash when carving MP3 files.Changed name Plist to Binary Plist and improved detection to limit false positives.Added minimum size requirement for carved JPGs (126 bytes), GIFs (43 Bytes), PNGs (68 bytes).Updated to allow selecting of carving of MFT Only, MFT and Carving, or Carving Only.Improved drawing of images to reduce flickering.Will now draw checkerboard background for improved display of transparent images.Report Generation, Added certificate verification information to non HTML reports.Report Generation, Added "Software Verification" link in report sidebar.Report Generation, added ability to toggle the inclusion of signature certificate verification information in report generation dialog.Report Generation, updated "Link to case files" and "Copy files to report location" options to "Create Redacted Report" and "Create Full Length Report" to be more descriptive.Report Generation, added the details of OSFOrensics digital signature to generated reports.Report Generation, separated the HTML and PDF report options into different templates, no longer need to generate a HTML report to get a PDF copy.Add Device, changed the default display name to include the date the shadow copy was taken.Added ability to rename case devices after they have been added.Added ability to save and load custom templates for evidence categories.Support for adding recovered partitions to case.Added support for password bypass for Win 10/Server 2016 Builds 1771 (via PEPassPass v1.2.3).Added check and display error for partition-only images without a supported OS before mounting as physical disk.Added check for whether VirtualBox extension pack is installed if USB 2.0 or USB 3.0 controller is selected.Will now display a proper error message when booting from VirtualBox failed (eg.We aren't aware of any crash bugs at this time, but please tell us if it isn't stable. When the final V10 release is complete anyone will active support or a subscription will get a free upgrade to V10. The link above will work as a 30 day trial. We are pleased to announce the Alpha / Beta releases of V10 of OSForensics for community testing and feedback.īeta period is now over.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |