Release 2017-12-05

Truxton 2.1.12.0

<< Released 2017-12-05 >>

Improvements

1. Truxton now parses email addresses from Facebok URLs
2. Image review view is now faster
3. You can now have multiple hashset folders
4. You can now perform differential loads and automatically discard the hashset. New loader options of -hashsetall, -hashseti and -hashsetm control the use of a hashset from everything in Truxton, an investigation or a specific piece of media.
5. ExportHashSet.exe tool has been added that allows you to generate a hashset file from data in Truxton.

New File Types

1. Apple Dynamic Linker Cache
2. Kaspersky Antivirus Database
3. Tinsel 3D Model
4. Apple Coverflow
5. PVR Texture
6. Apple SINF

Bug Fixes

1. Pretty significant Zip bugs. Folders that had no entry in an archive were not getting created in the database (file parentage blown) and dates were off by one month.
2. GZip files weren't being expanded
3. Arabic was missing some transliterated characters
4. Sort criteria wasn't being saved between visual media
5. Non-English MIME messages are now more accurately identified
6. Windows Restore Point change logs are now more accurately identified
7. Unicode identifier is now more strict
8. Excel2Yara.ps1 no longer produces a script that makes Yara die
9. More variants of Compiled Python are detected.