Adroit Photo Forensics Release Notes
In order to download the latest version, please use the link sent to you
via email when you registered. If you can't locate the link, you can
re-register at: http://digital-assembly.com/products/adroit-photo-forensics/downloads/
Existing Customers Only - Please go here to download the latest version.
Current Version 2.5c - Released on Sep 27th, 2011
New Features
- Added Recovery profiles. 6 recovery profiles are created by default, and new ones can be created by the user at any point.
- Added Ignore feature. See manual for more details.
- Ignore options during analysis available based on file size, duplicates and Ignore database.
- Greatly improved performance of sorting during report generation.
- Embedded Parsing should now be significantly faster.
Bug Fixes
- Fixed bug with very old FAT systems not being detected correctly (like those on a floppy disk).
- Fixed bug with Partition Information Offset label being incorrectly renamed as total size.
- Fixed bug with changes to SmartFiltering width and height filters in analysis options not being registered.
- Fixed bug that may have reduced count of photos in zips by a small margin.
- Fixed bug that was causing generic embedded parsing to miss certain photos.
- Fixed bug that was not showing extension mismatch photos in zip files.
- Fixed bug that was rarely causing an embedded photo to be recovered twice.
- Fixed bugs with all embedded parsers to provide enhanced stability.
- Fixed bug with progress bars not updating during folder recovery.
Version 2.5b - Released on Aug 08, 2011
New Features
- Added Recovery By Folder. Can be used for specific folders and recovering from CDs/DVDs etc.
- Added signature recovery for active files allowing recovery of active photos with incorrect extensions.
- Moved Hash Alert MD5 storage from internal structure to external database.
- Photos for alerting can now have their MD5, SmartHash (Fuzzy Hash) and categories stored.
- Automatic categorization now occurs for MD5 and SmartHash Alerts if categories are present.
- Added more resolution filters in photo gallery starting from 0x0 to 128x128.
- Improved speed of report generation slightly.
- Added ability to save files and parent/top-level containers using their Unique IDs.
Bug Fixes
- Fixed crash in decoding a rare form of png with custom markers.
- Fixed crash in decoding of a specific form of CRW file.
- Fixed bug in a rare form of jpeg which would cause resolution to be set to 0x0 and no photo details.
- 8-bit TIF files should now display thumbnails and the full image correctly.
- Fixed potential infinite loop in FAT file systems when a specific folder entry is not found.
- Fixed formats in FAT not being detected and doing a recovery at the sector level.
- Fixed a crash in a heavily corrupted thumbs.db
- Added fix during recovery so that if a user clicks on a recovery tab, it will stay on the tab.
- Fixed bug that would cause some sequential files to be carved partially.
- Fixed issue with multi-level zips taking large amounts of time to carve out of.
- Fixed bug that was not allowing generic embedded parsing to occur if the file specific parser failed.
- Fixed issue with certain file types not being scanned for embedded photos.
- Clicking default will no longer allow users to do SmartFiltering during recovery in demo edition.
- Fixed bug that would very rarely cause a photo at a specific cluster to be shown twice.
- Fixed bug that was not doing a full recovery in mult-partition physical recovery with trust file system off.
- Fixed rare conversion error from v2.4b and prior cases to v2.5
- Fixed some minor progress bar display issues.
Version 2.5a - Released on Jun 13, 2011
General:
- Optimized APF to be able to handle a million photos per case.
- Recovery is now about 20% faster than previous versions of APF using the same options.
- Added Windows thumbnail cache recovery for all versions of Windows.
- Added option for embedded photo recovery from specific active and deleted files including zip, Ms-Office, pdf etc.
- Added option for embedded photo recovery from every file encountered.
- Added option to carve photos at the byte level in unallocated space.
- Added option to validate active and embedded files recovered.
- Added support for Minolta (mrw), Sony (srf) , Epson Seiko (erf) and Fuji (raf) RAW formats.
- Added physical drives to list of possible evidence selections.
- Thumbnails that exist in a photo but are not pointed to by meta-data will now be identified.
Photo Gallery and Custom Gallery:
- Added sort option to photo gallery, now either sorting or grouping can be chosen.
- Added a new screen called custom gallery, where selected photos can be viewed/sorted/grouped in gallery format.
- Added option for selected photos in a group to be opened in the custom gallery.
- Added menu items to show only Thumbs.db, recycled, hash alerts, bookmarked and sector carved photos in the custom gallery.
- Added right click option to thumbnails to show photos from the same folder in the custom gallery.
- Added new group/sort options for Resolution and APF ID.
- Added new tab separation options for Valid/Invalid and Embedded/Not Embedded/Invalid
- User can now enter the page in a spinner. The old page labels have been removed.
Photo Viewer:
- Improved photo viewer photo display performance by 50%
- Multiple thumbnails if present in a photo now will be all be shown.
- Added more information including embedded status to photo viewer.
- Validity fields now show if any validation was run on the photos.
- Error messages for undisplayable photos are now more clear.
SmartFilters:
- Separated out SmartFilter Options during recovery and after recovery, so user can now choose quick SmartFilter options during recovery, and more detailed options after recovery.
- Added options to allow SmartFiltering to occur on embedded in active and embedded in deleted files.
- Added new thumbnail tab during recovery for showing SmartFiltered results if SmartFiltering during recovery is enabled. (Not available in the demo)
- Thumbnail mismatch: will now show the embedded thumbnail and the scaled down actual photo next to each other to make it clear that the thumbnail doesn't match the photo.
Reports:
- Added fields for showing Resolution, SmartHash, Thumbnail Mismatch and Full Photos in the reports.
- Clicking on thumbnails will show the full photo if the field is selected in the report.
- Reports are now saved in subfolders in the case and copying the subfolder will allow you to view complete reports anywhere.
- Added fields for Resolution, SmartHash and Thumbnail Mismatch to CSV reports.
Other:
- Optimized group selection from the group selection dialog allowing for faster view/print/export operations
- Reduced memory footprint of UI file objects.
- Embedded photos with no name links are called "embed-xxxxxx" where xxxxxx is a unique number.
- Added new tabs to recovery counts display to show file type counts and category profile counts.
- Reduced memory consumption when extracting photo data to display.
- Changed Analysis Options screen to be more readable and in the same format as global settings screen.
- Removed SmartFiltering Options button from Case Screen, now appears as a tab in Analysis Options.
- Made some text changes in the UI.
- APF thumbnails are now slightly smaller across most resolutions allowing more thumbnails per screen..
- APF thumbnails will no longer be slightly cut-off at the bottom.
- APF thumbnails during recovery no longer have multi-color text, and are of the same size as that of the photo gallery.
- APF thumbnails are now cached in a case database and not in the case folder for better performance.
- Added new option to show only recovery counts and not thumbnails during recovery.
- Added new option to upscale APF thumbnails for photos that are smaller than the thumbnail container size.
- Carved photos with no name links are called "carve-xxxxxx" where xxxxxx is a unique number.
- Improved zip carver so that embedded photos can be recovered from deleted zips.
Bug Fixes
- Fixed bug that prevented decoding of file systems with millions of records.
- Fixed bug that showed the same partition info twice in rare cases.
- Fixed bug that allowed selection of Logical/Physical/Disk Image text nodes.
- Fixed bug with missing evidence causing a case to go through case conversion which itself leads to an error.
- Fixed bug with GuidedCarved recovery count in reports being incorrectly printed.
- Fixed bug that prevented some eligible jpegs to not go through the GuidedCarving process when split/swap.
- Fixed bug with GuidedCarving such that a photo is less likely to fail in initializing the GuidedCarve process.
- Fixed potential crash when reading very large photos.
- Fixed rare bug that displayed SmartCarved photo sizes as being too small.
- Fixed rare bug that would cause the photo viewer to crash.
- Fixed some incorrect error messages.
- Fixed bug allowing recovery options button to be clicked immediately after clicking on analyze.
- Fixed bug that enabled use profile in category screen, even when there were zero photos recovered.
- Fixed bug that allowed menu selections immediately after clicking analyze or batch analyze.
- Fixed bug with incorrect size display for some really large partitions.
- Fixed rare jpeg decoder crash when processing a very corrupted progressive jpeg.
- Fixed bug with category counts that would not take into account successfull GuidedCarved photos.
- Appropriate message is now shown if a huge scaled photo can not show cluster-linked info.
- Moving between photos in photo viewer will now move the tab to the full image if the photo does not have a stored thumbnail and the stored thumbnail tab was selected.
- Fixed bug that caused swap block counts spinner to act erratically and change the categorization of the photo.
- Fixed bug that caused the photo gallery to hang if the desktop resolution was changed while running APF.
- Fixed hash alert tooltip showing Bookmarked values in photo gallery.
- Fixed bug in Date Filter Dialog that changed settings even though cancel was clicked.
- Fixed tiny flicker that occurred when bookmarking photos in gallery.
- Fixed potential hang in TimeLine when scrolling very fast through the timeline.
- Fixed bug that would slightly reduce the number of pngs recovered in LogCarving.
Version 2.4b - Released on Mar 03, 2011
New Features
- Added option to do SHA1 hash of evidence before and after recovery.
- Added new verify hashes screen where case evidence can be rehashed and verified.
- Added evidence device serial ID to case, log and report screens.
- Added evidence device model (Vendor ID + Product ID) to case, log and report screens.
Bug Fixes
- Fixed bug that was causing physical drive hashes to not match up before and after recovery.
- Fixed bug that was causing some non-partitioned sectors not to be used for hash calculation.
- EWF, Logical Drive and regular disk image hashes should now match with FTK.
- Fixed some minor display issues.
Version 2.4a - Released on Jan 05, 2011
New Features
- Increased speed of explicit image detection by 20% on average for fast and best.
- Reduced false positives and negatives for explicit image detection.
- Removed balanced explicit image detection, now that best is faster.
- Added option to show only explicit images with faces in them.
- Added option to sort files by Skin Percentage in SmartFilters.
- Changed Explicit Tree to show child explicit as a part of explicit among other changes.
- Added Auto-Categorization rules to move photos into categories based on SmartFilters.
- Added option to preserve groupings when profiles are changed and then selected for a case.
- GuidedCarving next and previous errors are now relative to the selected block.
Bug Fixes
- Fixed bug where right-clicking and redoing the SmartFilter in the tree did not show the right results for Child Explicit.
- Fixed bug with clicking stop button and clicking OK after SmartFiltering was finished causing a hang.
- Fixed bug which could cause SmartFilter screen to hang when left and mouse buttons were pressed simultaneously on the tree.
- Fixed bug where by faces detected as unknown were incorrectly being classified as children.
- Changed message from SmartFilter has no results to more generic "selected view has no photos".
- Fixed bug where double clicking on analyze incorrectly displayed overwrite dialog.
- Fixed bug where holding the X key down for a few seconds would cause a crash in SmartFilters and Photo Gallery.
- Fixed bug where holding the X key down could lead to some photos showing up twice in the SmartFilter and Photo Gallery.
- Fixed bug where selecting multiple groups or thumbnails and then viewing would show a screen title display error in the count.
- Fixed timeline screen title being lost when launching viewer in timeline and returning.
- Fixed right clicking or selecting a single group and generating a report not showing the group name in the report.
- Fixed very rare bug that prevented certain jpegs from displaying correctly.
- Fixed bug where swap and split buttons were not being disabled in the fragment tab when no block was selected.
- Fixed bug that would cause the scrolling function in SmartFilter and Photo Gallery to lock up if done very very fast.
- Fixed bug that could cause the program to hang if the SmartFilter button in the toolbar was double clicked.
- Fixed bug where selecting a new category profile twice would cause the program to crash.
- Fixed bug where a small selection of photos from a tab or SmartFilter would not show the correct amount in the photo viewer.
- Fixed bug during GuidedCarving for images which are fragmented before the image data which could cause GuidedCarving to crash or hang.
- Other smaller bug fixes and code optimizations.
Version 2.3c - Released on Oct 10, 2010
Bug Fixes
- Fixed bug where buttons were active in photo viewer even when photo was not fully loaded.
- Fixed bug with right click on SmartFilter trees with 0 photos causing a crash.
- Fixed bug where clicking on the SmartFilter icon while viewing photos in the SmartFilter would result in the go back button not functioning.
Version 2.3b - Released on Oct 06, 2010
Bug Fixes
- Fixed memory usage for SmartHashing.
- Improved SmartHashing detection rate.
- Fixed crash when timeline was the first screen chosen and then closed.
- Fixed bug where screen headings were not being refreshed when returning from another screen.
- Fixed bug not allowing changes to category profiles to be saved.
Version 2.3 - Released on Sep 20, 2010
New Features
- Added SmartFilter "Similar" which groups duplicates and slight modifications of photos together using
SmartHashing (Our Fuzzy Hashing).
- Added option to select photos from outside case and determine if duplicates or modified versions exist.
- Added report customization features, fields can now be selected/deselected for reports.
- Added option to export out photo details as a CSV with customization options similar to reports.
- Added tab for SmartCarving/GuidedCarving settings in Settings screen.
- Added categorization support with profiles. Built in North American CP and U.K. CP profiles present.
- Added categorization view alongside SmartFilter views.
- Modified SmartFilter, Categorization and Photo Gallery screens to allow for selection of thumbnails/groups.
- SmartFilter, Categorization and Photo Gallery screen buttons now operate on photo selections.
- Added slider for SmartFilter, Categorization, Photo Gallery screen.
- Added keyboard navigation support for SmartFilter, Categorization, Photo Gallery screens.
- Added more hot key support for SmartFilter, Categorization, Photo Gallery and Photo Viewer screens.
- Added 'X' key support to toggle between showing and hiding the interface in a number of screens.
- Added EXIF "Software" grouping in Photo Gallery screen.
- Added PNG support for SmartFiltering.
- Improved skin tone (Explicit detection).
- Improved child explicit detection considerably.
- Improved Recovery Counts screen to show valid/invalid and categorization counts.
- Reports based on multiple groups will now show photo details for each group in a separate section.
- Changed thumbnail displays to show more information including bookmarks, hash alerts and categorization.
- Thumbnail sizes will now default to better sizes for widescreen displays.
Bug Fixes
- Fixed bug with cluster size field not visible in Analysis Options screen.
- Fixed bug with SmartFilter Again and Settings button being displayed while SmartFiltering is going on.
- Fixed bug with pausing and stopping SmartFiltering and redoing SmartFilter causing resume button to show.
- Fixed bug where right-clicking on a SmartFilter and choosing to redo was giving incorrect results.
- Fixed bug with Bitmap photos not being smartfiltered and going into failed.
- Fixed bug with Explicit Slider not resetting when user right clicks and chooses to redo SmartFilter
- Fixed bug with Duplicates not being stored correctly if C++ returned skip.
- Fixed bug with Duplicates description showing the resolution and size for photos in the next group.
- Fixed bug with SmartFilters tree node not displaying the correct count of headers.
- Fixed bug with counts occassionally not being updated correctly during SmartFiltering.
- Fixed bug with mouse wheel/keyboard functionality being disabled when sorting in SmartFilter screen.
- Fixed bug with incorrect sector end ranges being shown when trust file system is turned off.
- Fixed bug with non-24 bit Bitmap photos not having thumbnails created.
- Fixed bug with incorrect case path being selected, canceled and getting the warning again when quitting.
- Fixed bug where the last page of thumbnails could show an empty page when the window was maximised.
- Fixed bug in popup on non-jpeg images showing a non-working option called show in external. (Removed option)
- Fixed bug which caused a rare crash when doing GuidedCarving and there were no unassigned blocks.
- Removed remaining time field during recovery as it was inaccurate.
- Fixed bug to prevent bleeding of title into toolbar buttons.
- Fixed bug to prevent the rare case where dialog progress bars would be too small to view.
- Fixed bug that would cause zoom radio buttons to hide if swap was opened and closed.
- Fixed bug that would result in less recoveries in Batch Analyze mode if the user clicked on the options button.
Version 2.2 - Released on Jul 15, 2010
New Features
- Added split-dd/raw disk image support finally!
- Added slider for dynamic skin detection for the Explicit SmartFilter. (Limited functionality in demo)
- Added hash alert functionality via hashkeeper, ilook and simple csv hash importing. (disabled in demo)
- Added bookmark and hash alert counts in grouping screen and reports.
- Added sector starting, count and ranges in both photo viewer as well as reports.
- Improved speed of "BEST Explicit Image Detection".
- Improved accuracy of "BEST Explicit Image Detection".
- Added right click functionality for SmartFilter Tree.
- Added right click option to run a selected SmartFilter without over-writing other SmartFilters.
- TimeZone selection for evidence now available in Analysis Options.
- File Creation/Modification/Access times now shown with time (hour/min/sec) and examiner timezone in Photo Viewer and Reports.
- Saving photos has been made more robust.
- Saving groups or all photos will now not stop at an error if at least one photo has been saved.
- Saving Overwrite dialog now has an option to rename photos being saved.
- Saving now displays summary screen with number of photos saved.
- Added new menu item 'Save Photos' in File Menu dropdown.
- Save, View, Report, Export and Timeline dialog for photo selection Dialog now shows counts of photos.
- Added pause functionality for recovery and smartfiltering screens.
- Added blurring option to blur thumbnails in the recovery, grouping, smartfiltering and timeline.
- Added SHA1 hashing, user can select between SHA1 or SHA256 in the analysis options dialog.
- Added TIFF and DNG recovery support.
- Added keyboard short cuts for many menu items.
- Added warning for new case creation if an existing case is opened.
- Removed submenus from View, Report and Timeline menu items, photo selection dialog box is now displayed.
- Grouping Results screen renamed to Photo Gallery.
- Photo Gallery screen buttons relocated and renamed to be consistent with SmartFilter screen buttons.
- Updating older APF cases versions now provides an option to backup case first.
- Added option to group and sort file names case insensitive (only should be used with english file names).
- Added additional demo limitations to reports and SmartFiltering.
Bug Fixes
- Fixed a bug where in rare cases longfilenames in the FAT filesystem are discarded due to fragmentation.
- Fixed a bug where FAT clusters were being shown 2 clusters less than required.
- Fixed a bug where FAT and EXIF dates were being shown based on GMT instead of examiner time.
- Fixed a crash while saving groups.
- Fixed not showing save folder for certain saving of groups.
- Fixed a crash in GuidedCarving.
- Fixed a bug preventing photos that had blocks that belonged to another photo that was GuidedCarved from recovering.
- Fixed bug preventing saving photos from HFS image to NTFS when HFS photo names have NTFS invalid file name characters.
- Fixed bug in Photo Selection dialog where selecting Successfully Carved Photos was not selecting equivalent radio buttons.
- Fixed bug causing bookmark counts in gallery screen to not update when selecting bookmarks from smartfilter or photo viewer.
- Fixed memory leak with disk image analysis code.
- Fixed memory leak with decoding Progressive Jpegs.
- Fixed miscellaneous other tiny memory leaks.
- Fixed bug in batch where selecting one option for a case was selecting that option for all other cases in the batch.
- Fixed bug with incorrectly identifying children on faces that were rejected in SmartFiltering.
- Fixed bug during SmartFiltering that was causing the whole screen not to be used to display thumbnails.
- Fixed bug where EXIF info panel was not showing up in reports in demo mode.
Version 2.1 - Released on Jun 07, 2010
New Features
- Added option to export hashes of photos to FTK using KFF file filters (disabled in demo).
- Improved speed of SmartFiltering to detect pictures with EI, CP, and Faces.
- Added three new speed/quality settings for explicit image detection.
- Added options to turn on/off individual SmartFilters.
- Added new filter "Thumbnail Mismatch", that compares an image to its thumbnail to show hidden images.
- Added new filter "Hash Copy" that groups photos that are exact MD5 hash matches.
- Added sorting options for SmartFilter results.
- Added new SmartFilter Setings button in SmartFilter screen.
- Added Timeline view option for SmartFilter results.
- Right-clicking on a group now allows you to view only that group in the timeline.
- Added date (exif date, file modification/creation/access date) filters for timeline.
- Added resolution filter for grouping screen.
- Added new day, month, year grouping option for Exif dates.
- Added SmartFilter Settings button to New Case Screen.
- Added multi-recovery mode select options for report.
Bug Fixes
- Fixed a bug that was preventing dynamic thumbnail generation of progressive jpegs.
- Fixed a bug that was preventing progessive jpegs from being smartfiltered.
- Fixed a couple of bugs that were causing SmartFiltering to slow down.
- Fixed a bug in reports when EXIF was not present for jpegs.
- Fixed a bug in incorrectly displaying deleted png sizes.
- Fixed BMP and GIF not displaying headerinformation in photo viewer.
- ColorSpace.Exif info now does not display a number, displays proper colorspace text.
- Fixed a bug with mousewheel not working occassionaly in SmartFilter screen.
- Fixed a bug causing character case to be incorrect for short filenames in newer versions of FAT12/16 filesystems.
- Fixed issue with tooltips preventing button clicks for buttons in the bottom of the screen.
- Changed all buttons to be Sansserif 11 and not Tahoma 11.
- Removed Exit buttons from Grouping and Recovery screens.
- Fixed lack of space between text in file type section of recovery counts.
- Reports now show if exif data is not supported, missing completely, or fields are unavailable.
- Fixed duplicate metadata entries for jpegs with iptc and exif.
- Fixed bug with ORW where width and height were being incorrectly updated.
Version 2.0 - Released on May 04, 2010
New Features
- SmartFiltering to detect pictures with EI, CP, and Faces.
- Added option to show either grouping or SmartFiltering screen after analysis.
- Added option to force generation of thumbnails dynamically from the
primary image as opposed to using the stored thumbnail. Useful for photos in CP cases where thumbnails
are legit but actual image is not.
Bug Fixes
- Fixed a bug with MD5 hashes generated incorrectly for file
sizes larger than 4MB.
- Fixed a bug with user being asked to start new case when
preferences unrelated to cases were changed.
- Fixed a bug where analysis options dialog box for default
values was popping up.
- Fixed a bug where FAT drives were detected as formatted even
though non-photo active files were present.
Version 1.005 - Released on March 23, 2010
Bug Fixes
- Fixed a bug with Active file sizes in NTFS being reported incorrectly.
- Fixed a bug with saving in a drive when the drive was clicked but not selected in the case screen.
Version 1.004 - Released on March 21, 2010
New Features
- APF now requires use of a dongle or online activation for
registered users. (Existing registered users do not have to switch yet)
- Photos and groups can now be bookmarked.
- Added option to group by bookmarks.
- Added option to limit time taken by SmartCarving.
- Added option to set starting offset and block size for carving.
- Added option to set default grouping for after recovery.
- Added support for Olympus RAW and Sony RAW.
- Added report choices when clicking on report toolbutton.
- Added support for cases with non-english characters.
- Added mouse-wheel thumbnail scrolling in photo viewer.
- Added GUID partition map reader (Apple).
- Added label describing options in Step 3.
- Added report dialog for selecting reports.
- Updated libewf version used.
Bug Fixes
- Fixed bug with loading Encase cases with multiple parts.
- Fixed bug with loading disk images named with non-english characters.
- Fixed bug with parsing some encase cases with partitions.
- Fixed bug with incorrect processing of file sizes of carved photos.
- Fixed bug with incorrect file hashes for successfully carved photos.
- Fixed bug with saving file names with non-english characters.
- Fixed bug with saving CIFF photos that were successfully carved.
- Fixed bug with reports and logs not showing non-english characters.
- Fixed bug with Canon CR2 recovery.
- Fixed NTFS parsing issues when dealing with international characters.
- Fixed NTFS parsing bug when structure was fragmented.
- Fixed bug with unparsed allocated areas not being processed.
- Fixed bug where a sequentially carved photo was shown as SmartCarved.
- Fixed bug with rare instance of carving on progressive jpegs not terminating.
- Fixed bug with photo viewer button color issues on Windows XP.
- Fixed bug with loading a case with no photos recovered not disabling relevant menu items.
- Fixed bug for displays running at 1024x768 being cut off at the bottom.
- Fixed bug with selecting the second blank row in batch analysis.
- Fixed bug with incorrect path in batch analyis when changing the case path followed by case name.
- Fixed crash with fast scrolling in grouping screen when using mouse-wheel.
- Fixed bug with page numbers not displaying correctly in grouping screen.
- Fixed bug with displaying the file size in the photo-viewer.
- Fixed rare writing bug with log file.
- Fixed bug with Active button not being enabled in grouping screen.
- Fixed bug with Successfully Recovered button showing incorrectly in grouping screen.
- Fixed bug with grouping by folders if folders had same name in different partitions.
- Fixed bug with changing case name after changing case path in new case screen.
- Improved performance of drive detection code.
- Dramatically reduced memory usage during file table decoding.
- Removed processing and display of network, and invalid drives.
- Partitions now show if they are regular/slack space/unpartitioned space.
- Added error message for when an encase file fails to open.
- Updated manual and help screenshots.
- Prepped for internationalization changes in upcoming version.
- Prepped for tagging changes in upcoming version.
Version 1.003 - Released on September 10, 2009
New Features
- Batch analysis of multiple evidence files.
- Added header details tab to the photo viewer, which will now allow users to see the header information of a file type in addition to the meta-data information.
- Added Splash Screen at startup
Bug Fixes
- Added a more comprehensive overwrite case dialog box including older case date details
- Fixed system going to sleep in cases where processing was being extremely slow.
- NTFS parsing on systems with sparse files should now work.
- Fixed issues with highly corrupted CR2 files.
- Fixed issues with highly corrupted CIFF files.
- Fixed issues with carving returning incorrect ending blocks.
- Fixed crash with corrupted quantization tables in corrupt JPEGs.
- Fixed memory corruption in invalid Huffman tables in JPEGs.
- Fixed buttons appearing in GUI when case is opened, but evidence is not present.
- Added check to see if user.home is writable and if not tries to write options in user.dir
- Fixed potential crash with Image Scaling
- Fixed missing text in show thumbnails button in photo viewer
Version 1.002 - Released on August 4, 2009
Bug Fixes
- Improved user manual.
- Added new tab separation option in grouping of photos
- Miscellaneous fixes
Version 1.001 - Released on July 29, 2009
- Added right click option to thumbnail groups to generate report for only those thumbnails.
- Changed Analysis Summary to read as Recovery Counts
- Improved look of Recovery Counts screen.
- Default daily update check is now set.
- Changed Toolbar icon set
- Added view all and recovery count toolbar buttons.
- Fixed a bug with swap score choices omitting blocks with exactly the same score
- Fixed a crash bug on startup when the global props file did not exist.
- Fixed check for updates not responding if Internet connection was not present.
- Fixed crash with HFS images.