Current Version 2.2 - Released on Jul 15, 2010
In order to download the latest version, please use the link sent to you
via email when you registered. If you can't locate the link, you can
re-register at: http://digital-assembly.com/products/adroit-photo-forensics/downloads/
Existing Customers Only - Please go here for information to download the latest version.
New Features
- Added split-dd/raw disk image support finally!
- Added slider for dynamic skin detection for the Explicit SmartFilter. (Limited functionality in demo)
- Added hash alert functionality via hashkeeper, ilook and simple csv hash importing. (disabled in demo)
- Added bookmark and hash alert counts in grouping screen and reports.
- Added sector starting, count and ranges in both photo viewer as well as reports.
- Improved speed of "BEST Explicit Image Detection".
- Improved accuracy of "BEST Explicit Image Detection".
- Added right click functionality for SmartFilter Tree.
- Added right click option to run a selected SmartFilter without over-writing other SmartFilters.
- TimeZone selection for evidence now available in Analysis Options.
- File Creation/Modification/Access times now shown with time (hour/min/sec) and examiner timezone in Photo Viewer and Reports.
- Saving photos has been made more robust.
- Saving groups or all photos will now not stop at an error if at least one photo has been saved.
- Saving Overwrite dialog now has an option to rename photos being saved.
- Saving now displays summary screen with number of photos saved.
- Added new menu item 'Save Photos' in File Menu dropdown.
- Save, View, Report, Export and Timeline dialog for photo selection Dialog now shows counts of photos.
- Added pause functionality for recovery and smartfiltering screens.
- Added blurring option to blur thumbnails in the recovery, grouping, smartfiltering and timeline.
- Added SHA1 hashing, user can select between SHA1 or SHA256 in the analysis options dialog.
- Added TIFF and DNG recovery support.
- Added keyboard short cuts for many menu items.
- Added warning for new case creation if an existing case is opened.
- Removed submenus from View, Report and Timeline menu items, photo selection dialog box is now displayed.
- Grouping Results screen renamed to Photo Gallery.
- Photo Gallery screen buttons relocated and renamed to be consistent with SmartFilter screen buttons.
- Updating older APF cases versions now provides an option to backup case first.
- Added option to group and sort file names case insensitive (only should be used with english file names).
- Added additional demo limitations to reports and SmartFiltering.
Bug Fixes
- Fixed a bug where in rare cases longfilenames in the FAT filesystem are discarded due to fragmentation.
- Fixed a bug where FAT clusters were being shown 2 clusters less than required.
- Fixed a bug where FAT and EXIF dates were being shown based on GMT instead of examiner time.
- Fixed a crash while saving groups.
- Fixed not showing save folder for certain saving of groups.
- Fixed a crash in GuidedCarving.
- Fixed a bug preventing photos that had blocks that belonged to another photo that was GuidedCarved from recovering.
- Fixed bug preventing saving photos from HFS image to NTFS when HFS photo names have NTFS invalid file name characters.
- Fixed bug in Photo Selection dialog where selecting Successfully Carved Photos was not selecting equivalent radio buttons.
- Fixed bug causing bookmark counts in gallery screen to not update when selecting bookmarks from smartfilter or photo viewer.
- Fixed memory leak with disk image analysis code.
- Fixed memory leak with decoding Progressive Jpegs.
- Fixed miscellaneous other tiny memory leaks.
- Fixed bug in batch where selecting one option for a case was selecting that option for all other cases in the batch.
- Fixed bug with incorrectly identifying children on faces that were rejected in SmartFiltering.
- Fixed bug during SmartFiltering that was causing the whole screen not to be used to display thumbnails.
- Fixed bug where EXIF info panel was not showing up in reports in demo mode.
Version 2.1 - Released on Jun 07, 2010
New Features
- Added option to export hashes of photos to FTK using KFF file filters (disabled in demo).
- Improved speed of SmartFiltering to detect pictures with EI, CP, and Faces.
- Added three new speed/quality settings for explicit image detection.
- Added options to turn on/off individual SmartFilters.
- Added new filter "Thumbnail Mismatch", that compares an image to its thumbnail to show hidden images.
- Added new filter "Hash Copy" that groups photos that are exact MD5 hash matches.
- Added sorting options for SmartFilter results.
- Added new SmartFilter Setings button in SmartFilter screen.
- Added Timeline view option for SmartFilter results.
- Right-clicking on a group now allows you to view only that group in the timeline.
- Added date (exif date, file modification/creation/access date) filters for timeline.
- Added resolution filter for grouping screen.
- Added new day, month, year grouping option for Exif dates.
- Added SmartFilter Settings button to New Case Screen.
- Added multi-recovery mode select options for report.
Bug Fixes
- Fixed a bug that was preventing dynamic thumbnail generation of progressive jpegs.
- Fixed a bug that was preventing progessive jpegs from being smartfiltered.
- Fixed a couple of bugs that were causing SmartFiltering to slow down.
- Fixed a bug in reports when EXIF was not present for jpegs.
- Fixed a bug in incorrectly displaying deleted png sizes.
- Fixed BMP and GIF not displaying headerinformation in photo viewer.
- ColorSpace.Exif info now does not display a number, displays proper colorspace text.
- Fixed a bug with mousewheel not working occassionaly in SmartFilter screen.
- Fixed a bug causing character case to be incorrect for short filenames in newer versions of FAT12/16 filesystems.
- Fixed issue with tooltips preventing button clicks for buttons in the bottom of the screen.
- Changed all buttons to be Sansserif 11 and not Tahoma 11.
- Removed Exit buttons from Grouping and Recovery screens.
- Fixed lack of space between text in file type section of recovery counts.
- Reports now show if exif data is not supported, missing completely, or fields are unavailable.
- Fixed duplicate metadata entries for jpegs with iptc and exif.
- Fixed bug with ORW where width and height were being incorrectly updated.
Version 2.0 - Released on May 04, 2010
New Features
- SmartFiltering to detect pictures with EI, CP, and Faces.
- Added option to show either grouping or SmartFiltering screen after analysis.
- Added option to force generation of thumbnails dynamically from the
primary image as opposed to using the stored thumbnail. Useful for photos in CP cases where thumbnails
are legit but actual image is not.
Bug Fixes
- Fixed a bug with MD5 hashes generated incorrectly for file
sizes larger than 4MB.
- Fixed a bug with user being asked to start new case when
preferences unrelated to cases were changed.
- Fixed a bug where analysis options dialog box for default
values was popping up.
- Fixed a bug where FAT drives were detected as formatted even
though non-photo active files were present.
Version 1.005 - Released on March 23, 2010
Bug Fixes
- Fixed a bug with Active file sizes in NTFS being reported incorrectly.
- Fixed a bug with saving in a drive when the drive was clicked but not selected in the case screen.
Version 1.004 - Released on March 21, 2010
New Features
- APF now requires use of a dongle or online activation for
registered users. (Existing registered users do not have to switch yet)
- Photos and groups can now be bookmarked.
- Added option to group by bookmarks.
- Added option to limit time taken by SmartCarving.
- Added option to set starting offset and block size for carving.
- Added option to set default grouping for after recovery.
- Added support for Olympus RAW and Sony RAW.
- Added report choices when clicking on report toolbutton.
- Added support for cases with non-english characters.
- Added mouse-wheel thumbnail scrolling in photo viewer.
- Added GUID partition map reader (Apple).
- Added label describing options in Step 3.
- Added report dialog for selecting reports.
- Updated libewf version used.
Bug Fixes
- Fixed bug with loading Encase cases with multiple parts.
- Fixed bug with loading disk images named with non-english characters.
- Fixed bug with parsing some encase cases with partitions.
- Fixed bug with incorrect processing of file sizes of carved photos.
- Fixed bug with incorrect file hashes for successfully carved photos.
- Fixed bug with saving file names with non-english characters.
- Fixed bug with saving CIFF photos that were successfully carved.
- Fixed bug with reports and logs not showing non-english characters.
- Fixed bug with Canon CR2 recovery.
- Fixed NTFS parsing issues when dealing with international characters.
- Fixed NTFS parsing bug when structure was fragmented.
- Fixed bug with unparsed allocated areas not being processed.
- Fixed bug where a sequentially carved photo was shown as SmartCarved.
- Fixed bug with rare instance of carving on progressive jpegs not terminating.
- Fixed bug with photo viewer button color issues on Windows XP.
- Fixed bug with loading a case with no photos recovered not disabling relevant menu items.
- Fixed bug for displays running at 1024x768 being cut off at the bottom.
- Fixed bug with selecting the second blank row in batch analysis.
- Fixed bug with incorrect path in batch analyis when changing the case path followed by case name.
- Fixed crash with fast scrolling in grouping screen when using mouse-wheel.
- Fixed bug with page numbers not displaying correctly in grouping screen.
- Fixed bug with displaying the file size in the photo-viewer.
- Fixed rare writing bug with log file.
- Fixed bug with Active button not being enabled in grouping screen.
- Fixed bug with Successfully Recovered button showing incorrectly in grouping screen.
- Fixed bug with grouping by folders if folders had same name in different partitions.
- Fixed bug with changing case name after changing case path in new case screen.
- Improved performance of drive detection code.
- Dramatically reduced memory usage during file table decoding.
- Removed processing and display of network, and invalid drives.
- Partitions now show if they are regular/slack space/unpartitioned space.
- Added error message for when an encase file fails to open.
- Updated manual and help screenshots.
- Prepped for internationalization changes in upcoming version.
- Prepped for tagging changes in upcoming version.
Version 1.003 - Released on September 10, 2009
New Features
- Batch analysis of multiple evidence files.
- Added header details tab to the photo viewer, which will now allow users to see the header information of a file type in addition to the meta-data information.
- Added Splash Screen at startup
Bug Fixes
- Added a more comprehensive overwrite case dialog box including older case date details
- Fixed system going to sleep in cases where processing was being extremely slow.
- NTFS parsing on systems with sparse files should now work.
- Fixed issues with highly corrupted CR2 files.
- Fixed issues with highly corrupted CIFF files.
- Fixed issues with carving returning incorrect ending blocks.
- Fixed crash with corrupted quantization tables in corrupt JPEGs.
- Fixed memory corruption in invalid Huffman tables in JPEGs.
- Fixed buttons appearing in GUI when case is opened, but evidence is not present.
- Added check to see if user.home is writable and if not tries to write options in user.dir
- Fixed potential crash with Image Scaling
- Fixed missing text in show thumbnails button in photo viewer
Version 1.002 - Released on August 4, 2009
Bug Fixes
- Improved user manual.
- Added new tab separation option in grouping of photos
- Miscellaneous fixes
Version 1.001 - Released on July 29, 2009
- Added right click option to thumbnail groups to generate report for only those thumbnails.
- Changed Analysis Summary to read as Recovery Counts
- Improved look of Recovery Counts screen.
- Default daily update check is now set.
- Changed Toolbar icon set
- Added view all and recovery count toolbar buttons.
- Fixed a bug with swap score choices omitting blocks with exactly the same score
- Fixed a crash bug on startup when the global props file did not exist.
- Fixed check for updates not responding if Internet connection was not present.
- Fixed crash with HFS images.
