Release 2016-10-11 - Revision history

Sam at 01:25, 6 June 2024

2024-06-06T01:25:38Z

Sam at 21:31, 5 June 2024

2024-06-05T21:31:30Z

Sam at 21:28, 5 June 2024

2024-06-05T21:28:48Z

Sam at 21:27, 5 June 2024

2024-06-05T21:27:59Z

Sam: Created page with "=Truxton 1.164.7254.864= Released 2016-10-11 ==Improvements== # New installation method, Setup.exe. This executable will detect the need for Java and PostgreSQL and spawn th..."

2024-06-05T08:30:47Z

Created page with "=Truxton 1.164.7254.864= Released 2016-10-11 ==Improvements== # New installation method, Setup.exe. This executable will detect the need for Java and PostgreSQL and spawn th..."

New page

=Truxton 1.164.7254.864=

Released 2016-10-11

==Improvements==
# New installation method, Setup.exe. This executable will detect the need for Java and PostgreSQL and spawn those installers before starting the Truxton installer. Also, if your license key information is stored in a file named "License.txt" in the same folder as Truxton.msi, the installer will automatically register your copy of Truxton. Hashsets shipped in the ISO will automatically be copied to the installed machine.
# Desktop: new "Lindemeyer Leap" capability to click on a file's Media from the browse (query) result and be taken to that file's position in the filesystem on the media summary page.
# "Remove" media button has been relabeled to "Uninclude" to reinforce that no data will be deleted from the database.
# Reports are now the first tab on the Investigation page.
# Media being loaded can be paused or resumed.
# Automatically generated Investigation details make more sense. It is now a date and time rather than a big long serial number looking thing.
# Truxton works with PostgreSQL 9.6. This is now included in the install package.
# All ETL processes now have an application name that will show in the database administrator (PgAdmin) user interface. This tells you which ETLs are connected to the server.

==New File Types==
# [[Type_GoPro_Version|GoPro Version]] - A text file that GoPro puts on their SD cards. Contains camera serial number and WiFi MAC address.
# [[Type_System_Deployment_Image|System Deployment Image]] - Microsoft bootable image file.
# [[Type_VirtualBox_Disk_Image|VirtualBox Disk Image]] - Oracle disk image file.

==Bug Fixes==
# The number of applications installed in the Media Summary Report is now correct.
# Cached reports would sometimes be generated twice, SOLR indexing of meta data wasn't getting executed.
# ETL processes no longer create installation logs.
# Some timeline types were not being displayed in the timeline.
# Special folders (Media, Root, Partition, etc.) no longer have a status of "empty eliminated"
# Apple [[Type_Apple_Disk_Image|DMG]] files are now properly identified.
# Carve files and Master Boot Record parentage is fixed.
# Some depot file entries were not being made to the database making file content retrieval impossible.

@@ Line 1: / Line 1: @@
 =Truxton 1.164.7254.864=
-[[Release 2016-09-15|<<]] Released 2016-10-11[[Release 2016-10-31|>>]]
+[[Release 2016-09-15|<<]] Released 2016-10-11 [[Release 2016-10-31|>>]]
 ==Improvements==

@@ Line 1: / Line 1: @@
 =Truxton 1.164.7254.864=
-[[Release Release 2016-09-15|<<]] Released 2016-10-11[[Release 2016-10-31|>>]]
+[[Release 2016-09-15|<<]] Released 2016-10-11[[Release 2016-10-31|>>]]
 ==Improvements==

@@ Line 3: / Line 3: @@
 ==Improvements==
-# New installation method, Setup.exe. This executable will detect the need for Java and PostgreSQL and spawn those installers before starting the Truxton installer. Also, if your license key information is stored in a file named "License.txt" in the same folder as Truxton.msi, the installer will automatically register your copy of Truxton. Hashsets shipped in the ISO will automatically be copied to the installed machine.
+# You can now add analyst notes to anything.
-# Desktop: new "Lindemeyer Leap" capability to click on a file's Media from the browse (query) result and be taken to that file's position in the filesystem on the media summary page.
+# We can now extract GPS track log info from GoPro videos.
-# "Remove" media button has been relabeled to "Uninclude" to reinforce that no data will be deleted from the database.
+# CreateHashList.exe has been updated to work with the current schema.
-# Reports are now the first tab on the Investigation page.
+# New line style for photo field of view in KML makes it easier to see which direction a camera was pointed when a photo was taken.
-# Media being loaded can be paused or resumed.
+# The desktop preview pane will now render HTML.
-# Automatically generated Investigation details make more sense. It is now a date and time rather than a big long serial number looking thing.
+# Details from E01 fields is now put into the media description by default.
-# Truxton works with PostgreSQL 9.6. This is now included in the install package.
+# When reporting a bug, we now produce a ZIP file of the log files.
-# All ETL processes now have an application name that will show in the database administrator (PgAdmin) user interface. This tells you which ETLs are connected to the server.
+# New "Author" Entity. We can now track authors of documents across investigations.
+# You can now rotate, pan and zoom images in the desktop viewer.
-==New File Types==
+# Hash List reports now include the files that hit rather than just a count of the number of hits in each list.
-# [[Type_GoPro_Version|GoPro Version]] - A text file that GoPro puts on their SD cards. Contains camera serial number and WiFi MAC address.
+# Media now has an expiration date.
-# [[Type_System_Deployment_Image|System Deployment Image]] - Microsoft bootable image file.
+# We now have a unified file system tree view.
 ==Bug Fixes==
-# The number of applications installed in the Media Summary Report is now correct.
+# The Yara ETL now monitors the status of the rules file. Any changes are immediately picked up.
-# Cached reports would sometimes be generated twice, SOLR indexing of meta data wasn't getting executed.
+# Permissions on configuration files and program data folders is fixed.
-# ETL processes no longer create installation logs.
+# Identification of Apple-generated MIME messages is now detected.
-# Some timeline types were not being displayed in the timeline.
+# Short videos were not having contact sheets made.
-# Special folders (Media, Root, Partition, etc.) no longer have a status of "empty eliminated"
+# Physical Disk Offsets for FAT file systems is now supported.
-# Apple [[Type_Apple_Disk_Image|DMG]] files are now properly identified.
+# E01's of physical RAM are now handled correctly. The resulting file is of type "Raw Memory"
-# Carve files and Master Boot Record parentage is fixed.
+# A number of entities weren't being sourced correctly in the Investigator Findings report.