Release 2020-02-24

Truxton 3.2.0.0

<< Released 2020-02-24 >>

Improvements

1. Added a tray app to help administrate system status.
2. Added ability to robustly log entire system status through SysLog.
3. Reduce memory footprints for all ETLs and Client applications.
4. Extract disk signatures out of Master boot records.
5. Improved identification for several file types
   1. PSD
   2. GZIP
   3. TAR
   4. ICO
   5. Android Resources
6. Added text extract ETL. Text from most documents like doc, docx and pdf are extracted and added as a child file.
7. Display extracted text for binary word document files.
8. Omit directories for recent files section in media summary report.
9. Added more variants of CPIO type identification.
10. Exporting / importing investigations and media now have their own file type.
11. Inform users when display options might hide files better.
12. Better serial numbers for Panasonic EXIFs.
13. Improved Author artifacts when there are multiple authors
14. Improved accuracy of GoPro Media format.
15. Greatly improved python bindings and updated python support to python 3.8.
16. Improved validation of EXIF timestamps.
17. Quicktime Video now gets expanded for GPS location and time.
18. Appended Zip files are now detected and tagged.

Bug Fixes

1. Fix duplicate definitions being output for finding report.
2. Fix bug where artifact types report would not load.
3. Fixed issue where colors for types weren't being saved.
4. Fixed issue where previewing xlsx files could crash the UI.
5. Fixed issue where sorting by sha1 was not working correctly.
6. Fixed issue where editing/saving a subject was not working correctly.
7. Parsing of binary fields in EVTX records is fixed.
8. Fixed issue where tags were not being initially displayed when reviewing items.
9. Fixed issue where negative offsets were being reported in hex viewer offset label.
10. Fixed bug in COFF (obj) file identification.
11. Several issues fixed and improvements for carving:
    1. Length for TIFF, PNG, Unicode, and LNK files.
    2. PDFs weren't being carved.
    3. Length for TAR and WIM files.
    4. Added BZ2 (bzip).
    5. Added RAR.
    6. Added 7Zip.
    7. Improved MP4 carving.
    8. Added ASF.
    9. Fixed MPEG2 carving
    10. Added FLV support.
    11. Ignore empty file.
    12. Improved EXIF and TIFF carving.
    13. Added Superfetch.
    14. Improved JPGs carving.
    15. Improved metadata for MP4 carving.
12. Office 2007 details weren't being correctly extracted.
13. Too much free space from disk images was being processed.
14. Fixed issue where sorting by domain counts in the domain graph viz wasn't working as expected.

New File Types

1. MP4 with DRM.
2. Firefox XPI - Firefox browser extension in a zip file.
3. Windows State Repository - Stateful store from Windows Universal Apps.
4. Firefox HSTS - Firefox Http security file that contains browser history.
5. Firefox Snappy - compressed cache file.
6. Google Analytics Cookies - URLs are now added as website visits