Release 2016-10-11

Truxton 1.164.7254.864

<< Released 2016-10-11 >>

Improvements

1. You can now add analyst notes to anything.
2. We can now extract GPS track log info from GoPro videos.
3. CreateHashList.exe has been updated to work with the current schema.
4. New line style for photo field of view in KML makes it easier to see which direction a camera was pointed when a photo was taken.
5. The desktop preview pane will now render HTML.
6. Details from E01 fields is now put into the media description by default.
7. When reporting a bug, we now produce a ZIP file of the log files.
8. New "Author" Entity. We can now track authors of documents across investigations.
9. You can now rotate, pan and zoom images in the desktop viewer.
10. Hash List reports now include the files that hit rather than just a count of the number of hits in each list.
11. Media now has an expiration date.
12. We now have a unified file system tree view.

Bug Fixes

1. The Yara ETL now monitors the status of the rules file. Any changes are immediately picked up.
2. Permissions on configuration files and program data folders is fixed.
3. Identification of Apple-generated MIME messages is now detected.
4. Short videos were not having contact sheets made.
5. Physical Disk Offsets for FAT file systems is now supported.
6. E01's of physical RAM are now handled correctly. The resulting file is of type "Raw Memory"
7. A number of entities weren't being sourced correctly in the Investigator Findings report.