Release 2019-08-15

From truxwiki.com
Jump to navigation Jump to search

Truxton 3.0.0.0

<< Released 2019-08-15 >>

Improvements

  1. Add more domain favicons
  2. Display the loader version number when viewing media
  3. User can now reprocess media from the UI
  4. Added relationships display to UI - when viewing items Truxton now displays related items to quickly discover items of forensic interest. Applicable when viewing: Artifacts, Camera Info, Events, Files, Hashes, Locations, Messages, Websites.
  5. Added support to expand Windows Activities Database
  6. Added ability to export to Analyst Notebook (ANX)
  7. Added breakout of the bits of the Mach executable "flags" member.
  8. Added support for XWays and Autopsy hashset formats
  9. Added support to expand Jumplist Version 4
  10. Improved carve quality
  11. Added Truxton uri for sha1 hashes
  12. Added button in hex viewer to let user jump to next non-zero byte offset
  13. When tagging a file as having an external drive reference, we now include the drive letter that was the external drive.
  14. Added new Event Type: Possible Malware Infection
  15. Added new Event Type: Network Activity
  16. Added support to pull network activity from a SRUM database
  17. Added expansion for RDP Reconnections events
  18. MRU Entries are now exploited
  19. Added new Artifact type: Apple Authentication ID (AuthID)
  20. Added New section in the media summary report for RDP connection information.
  21. Added better support for new version of PNF files (3.3),
  22. Improved Patch Result file typing
  23. Timestamps are preserved when downloading files from the UI or when downloading a report with included binaries
  24. Explain what files are being listed in the media summary report
  25. User can now download items from any facet - artifacts, camera info, events, etc.
  26. When downloading items, also allow user to download metadata and tag information in a json file
  27. Added support for bulk tagging items in the search panel
  28. User can now manage file groups from the settings area.
  29. Added media CSV export
  30. Timeline now remembers where you last were
  31. Navigate to last viewed page when starting the client again
  32. Added more map url configuration presets
  33. Improved timeline load speed
  34. MAC addresses are now pulled out of URLs
  35. Multiselects now show their configured colors where applicable
  36. SOLR indexer is now faster (we were able to eliminate a database call)
  37. ETLs and desktop can now connect to a Postgres Server without a server certificate
  38. Drone flight paths can now violate sensitive sites
  39. WiFi passwords are now included in the WiFi section of the Media Summary Report
  40. Added feature to download events from the timeline in a portable report. It includes related files and pictures.
  41. User can now quickly hide eliminated files from search results (on by default)

Bug Fixes

  1. Fix crash when loading more items in the filesystems treeview
  2. Fix occasional crash when quickly changing search categories
  3. Fix issue where tooltips from reports lingered around
  4. Fix issue where thumbnail hashes were being incorrectly calculated
  5. Fix some PNGs being incorrectly identified as JPGs
  6. Fix parentage bug when files inside of zips looked like a url
  7. Fix pdf authoring bug
  8. Fix malformed guids being extracted from SQLite dump
  9. Fix issue where certain xml wasn't being parsed correctly
  10. Fix issue where clicking go back would place you in the wrong location
  11. Fix USB report drive letter, volume name and serial number formatting issue
  12. Fix mis-identification of text file of hashes as base 64 encoded data
  13. Fixed CAB expansion bug
  14. Fixed crash when quickly navigating back to a pdf
  15. Fixed Zlib not being expanded
  16. Fixed javascript ID bug
  17. Tighten the identification of tar files and restore point logs when carving
  18. Fixed USB Serial Number Bug for EVTX
  19. Fixed LNK Parsing Bug
  20. Fixed database optimization missing a few tables
  21. Fixed issue where multiple categories can appear to be selected
  22. Fixed Registry ETL Missing UserAssist Keys
  23. Fixed media last update date not being UTC
  24. Fixed some SSIDs being added as MAC Address artifacts
  25. Fixed issue where some documents were not having their contents indexed by the text indexer
  26. Fixed issue where decimal values could not be partially searched
  27. Fixed issue where full text search index wasn't being purged when data was purged
  28. No longer add programs without names from the registry to events
  29. Fixed bug in 64-EXE Carved file naming
  30. Fixed messages not being displayed correctly in the my findings report
  31. Fix the tag control associating a tag when pressing the escape key (should discard)
  32. Fixed issue where Truxton ui could not launch when multiple users (RDP) on the same machine already had it open
  33. Fixed issue where tag control wasn't always rendering tags.
  34. Touch scrolling on reports is now supported
  35. Fix zip identification issue
  36. Installer now detects when the account name has a space in it which causes Postgres installer to fail
  37. Installer now installs C++ runtimes before attempting to install Postgres to prevent it from dying

New File Types

  1. Microsoft Software Protection Tokens (tokens.dat)
  2. Movie Filmroll File (moff)
  3. NOD32 anti-virus scanner update data file (NOD32)
  4. DVD info (DVD IFO)
  5. J2ME records management service (J2ME RMS)
  6. Interleaved Bitmap (ILBM)
  7. Restore Point Log
  8. Inno uninstall
  9. USN Journal - ($usnjnrl$.$J)
  10. Analysts Notebook XML Chart (ANX)
  11. Windows Error Report Snapshot (WER)
  12. Unity Asset Bundle
  13. Automatic Jumplist
  14. Windows Patch Data - Microsoft Binary Differential Compression (BDC)
  15. Dropbox Attributes
  16. System Resource Utilization Monitor - SRUM Dump (srudb.dat)
  17. Services Plist
  18. Powershell Transcript
  19. Powershell Module Analysis Cache
  20. Microsoft Patch Result
  21. PNF file details
  22. Git Blob
  23. Chrome Resource Pack v5
  24. Git tree
  25. Software License Internal Code (SLIC)
  26. Microsoft OneDrive Log
  27. Android Application (apk)
  28. GL Binary
  29. Viber Data
  30. Viber Messages
  31. Android Bug Report
  32. Android Network History
  33. Snapchat Preferences
Retrieved from "https://truxwiki.com/index.php?title=Release_2019-08-15&oldid=9618"