Sam: Created page with "=Truxton 2.1.0.0= << Released 2017-08-04 >> ==Improvements== # Desktop UI is more responsive. # Video Contact Sheet truncation...."

2024-06-06T01:33:30Z

Created page with "=Truxton 2.1.0.0= << Released 2017-08-04 >> ==Improvements== # Desktop UI is more responsive. # Video Contact Sheet truncation...."

New page

=Truxton 2.1.0.0=
[[Release 2017-06-01|<<]] Released 2017-08-04 [[Release 2017-09-11|>>]]

==Improvements==
# Desktop UI is more responsive.
# Video Contact Sheet truncation. Short videos no longer have 10x10 contact sheets generated. Improves load time.
# Load Lists now support all command line features by using the G: line.
# New LoadAs loader option to force the loader's method of loading data. This allows you to force the loader to load a file as a disk image.
# Layout of the search filters has been improved.
# Jurisdiction support has been added to the UI.
# Amazon search terms added.
# Full Windows account information now included in Media Summary report.
# File slack space is now a child file. If there is no slack space or the slack space is completely empty, there will be no child file.
# All run times from prefetch files are reported instead of just the last one.
# Initial support for PST/OST files.
# Support for FedEx, Lasership and UPS package tracking numbers.
# Alert counts are now shown for media and investigations.
# Added hex dumps to load debugging. If the Load.exe doesn't process a disk image correctly, you can now do:<br /><code>Load.exe -loadas 514 -verbose Yes -tsk_verbose Yes -pfiles No -pfree</code><br/> No "Disk.E01" The loader will tell you what it will do without processing files or freespace.
# File carving is now multithreaded.
# The desktop can now manage a list of databases to connect to.
# TuneDatabase.ps1 Powershell script will configure PostgreSQL server for multiple users and faster performance.
# Database library now detects PostgreSQL deadlocks and waits them out.
# Truxton now extracts the authors from PDF files.
# Support for loading L01 files.
# New Powershell script, MyFindings.ps1 will export your My Findings report along with all files referenced in that report to a folder of your choosing.
# You can now create tags in a Coordinated Rapid Review.

==New File Types==
# NeXTSTEP Bill of Materials
# Apple Icon
# Android Backup
# KA3D Data
# Berkeley Database
# Apple Keychain
# Google Quick Search
# Android Call Log
# iPhoto Faces

==Bug Fixes==
# Carved 64-bit Windows executables are now named.
# Phantom media identifiers were being added to File table records.
# UTF-8 stored in ASCII fields is now detected. This affected tar files and LNK files.
# "N/A" coming from Cellebrite reports is now ignored.
# SQLite file header details were missing integer fields.
# MP3 file carving was utterly stupid. It is much better now.
# Image Thumbnailer ETL now has a dead-man-switch. If a file causes the code to neter an endless loop, the process will die after 50 seconds.
# Improved carved SQLite file length calculation.
# User account last logon times are now correct.
# Entropy calculation now checks for zero entropy. Sometimes, a file full of zeroes would produce a non-zero entropy like 0.00000000000000012 (floating point number fun).
# When spawning the loader from the desktop, the current working directory is now set. Relative pathed disk image names were being missed.
# The "data" variant of E01 is now supported.
# Fixed a Media list paging bug.
# Unique entity list contained multiple entries.
# plist parsing bug was causing ETL death.
# Expanding zip file fragments was broken.
# Years before 1981 are now parsed in MIME headers.
# Index.dat files were causing exceptions to be thrown.
# Firefox Cache2 file carver was too loose.

Release 2017-08-04 - Revision history

Sam: Created page with "=Truxton 2.1.0.0= << Released 2017-08-04 >> ==Improvements== # Desktop UI is more responsive. # Video Contact Sheet truncation...."