Release 2021-06-21

From truxwiki.com
Jump to navigation Jump to search

Truxton 4.0.0.0

<< Released 2021-06-21 >>

Truxton now uses PostgreSQL 12.

Improvements

  1. Improving speed of accessing file contents
  2. We now pull battery serial numbers from DJI Mavic Mini
  3. Better support for Yellowbrick database server
  4. File Details are now a JSON child file called FileDetails.json
  5. MP4 file details now includes GoPro details
  6. New "differential" load capability
  7. Extract GoPro Karma flight logs
  8. TruxtonCLI command line tool has had many commands added to it
  9. Python support now requires 3.9
  10. Improved quality of Author artifacts coming from RTF files
  11. Better ASCII identification
  12. Fewer false-positives when identifying Targa files
  13. Better cleaning up of log files (avoid disk fill up)
  14. Parsing Unicode filenames from LNK files
  15. Faster Message Bus IO
  16. Better management of ETL processes
  17. Better parsing of EVTX files
  18. Better parsing of authors from PDF files
  19. Added support for photographs embedded in vCards
  20. Support Python 3.9
  21. Better transliteration of non-English text
  22. Identification of Windows Raw Memory Dumps
  23. Scanning for AES crypto keys
  24. Optionally backup and/or publish media immediately upon completion of load
  25. New File Origin: vCard Attachment
  26. New Location Types:
    1. Meeting - where a meeting took place
    2. Arrest - where a suspect was arrested
    3. Home
  27. New Event Types:
    1. Office Alert - Alerts generated by MS-Office
    2. Time Changed - When the time on a machine was changed
  28. Exporting can now optionally include content
  29. Added publish export option - allows you to export directly to another Truxton instance.
  30. Show better indicator when media exists outside of investigation in the context of artifacts
  31. Query Builder improvements
    1. Added Query by ID rule
    2. Added full path searching
    3. Tag Category
  32. Better feedback for progress for many long running events in the UI
  33. Added manifest report that lists all reports
  34. The Truxton Client has been renamed to Truxton Analyst
  35. Better performance when viewing large amounts of file details
  36. Display more media load information
    1. Load duration
    2. Load rate
    3. Content index status
  37. Added more relationship displays
    1. similar items relationship (this uses the hash)
    2. generic relationship (e.g. alias, home phone, etc)
  38. Added placeholder display view for encrypted documents
  39. Added ability to right click "view in maps" links to copy url
  40. Added feature for user to hide eliminated files in filesystem views
  41. Added more message participant field categories
  42. Added origins filter to visual media page
  43. Added dismiss button to toast notifications in the UI
  44. Added bulk conversation downloads
  45. Better support and speed improvements for large 7z archives
  46. Added indexing for PowerPoint files (ppt and pptx). Extracted text now displays in the UI
  47. Added more information to exif tag block label in findings display
  48. Added more file types eligible for contact sheet generation
  49. Randomized colors now have better contrast ratios
  50. Most actions when viewing an investigation or media are now in a sub-menu
  51. Added summary display to non-renderable reports (kmz, excel, etc). To give the user a heads-up on what's inside
  52. Better photoshop psd drawing support
  53. Add meaning to jpeg DQT precision integers file details
  54. Add better MBOX parsing support
  55. The line colors for grouped items in the timeline are now comprised of their child types.
  56. Notes and findings are now the left-most column by default.
  57. Better support for cpio files
  58. Added Notify ETL
  59. Added more alerting criteria
    1. Hash Lists
    2. Tags
    3. Tag Categories
  60. Show number of hashes parsed for hash list management page
  61. Added display page for alerts. Shows what comprises the alert and which media has triggered the alert.
  62. Moved tag configuration to its own section.
  63. Bulk download improvements:
    1. items can now be placed into a folder or a tar file
    2. when using the md5.ext format, items are now in the same root directory offering natural deduplication.
    3. Omit eliminated files from downloads.
  64. Added counts to child artifacts correlations nav items.
  65. Added ability to display censored images in a review.
  66. Added ability to use integrated security when connecting to Truxton Postgres instances.
  67. Sensitive site violations/list improvements
    1. Can now manage from the UI
    2. More information displayed in SSV automatically applied tags
    3. Added SSV section to the media summary report
  68. Added investigation summary report.

Bug Fixes

  1. Fix crash when viewing timeline
  2. DJI drone packet parser was missing some packets
  3. Offsets to entities were incorrect for large XRY files
  4. Fix inconsistent rendering in hex viewer
  5. Fixed NTFS Create Time
  6. Moved calculation of MD5 to internal code to prevent FIPS Mode breakage
  7. All streams from BZip files are now expanded
  8. Truxton can now process file contents even if Windows moves it
  9. Fixed UTF-8 strings coming from LNK files and parsing malformed LNKs
  10. Missed identification of Compressed Manifest files
  11. Endless loop expanding malformed BZip files
  12. Manually created entities from hex view no longer allow null characters
  13. Fixed several resource leaks in ETLs and Desktop UI
  14. Endless loop when carving ASF files
  15. Added new tab display for file information and related file details/notes
  16. Fix some cases where photos marked as offensive we being displayed
  17. Fix several issues in media summary report
  18. Fix issue where media CSV export was incorrect
  19. User can now delete a review when it completes
  20. Fix several issues where the state of a grid was not saved between views
  21. Fix inconsistent counts when certain filters were applied
  22. Fix identification of OXPS files
  23. Fix issue with parsing large MIME files
  24. Don't show highlights of artifacts with unknown locations in hex viewer. However, inform the user of this information
  25. Fix issue where multiple users on the same machine could not load Truxton Analyst.
  26. Fix some issues with identifying EVTX files
  27. Fix issue with getting certain registry string values
  28. Fix issue where review images were not being censored when marked as offensive.

New File Types

  1. Extended Audible.com Audio
  2. Chrome Extension
  3. AVI Image
  4. AVI Image Sequence
  5. MPEG 4 Audio
Retrieved from "https://truxwiki.com/index.php?title=Release_2021-06-21&oldid=9622"