https://truxwiki.com/index.php?action=history&feed=atom&title=Release_2021-06-21Release 2021-06-21 - Revision history2026-09-09T17:02:57ZRevision history for this page on the wikiMediaWiki 1.34.1https://truxwiki.com/index.php?title=Release_2021-06-21&diff=9622&oldid=prevSam: Created page with "=Truxton 4.0.0.0= << Released 2021-06-21 >> Truxton now uses PostgreSQL 12. ==Improvements== # Improving speed of accessing file..."2024-06-06T10:16:01Z<p>Created page with "=Truxton 4.0.0.0= <a href="/Release_2020-03-20" title="Release 2020-03-20"><<</a> Released 2021-06-21 <a href="/Release_2021-07-21" title="Release 2021-07-21">>></a> Truxton now uses PostgreSQL 12. ==Improvements== # Improving speed of accessing file..."</p>
<p><b>New page</b></p><div>=Truxton 4.0.0.0=<br />
[[Release 2020-03-20|<<]] Released 2021-06-21 [[Release 2021-07-21|>>]]<br />
<br />
Truxton now uses PostgreSQL 12.<br />
==Improvements==<br />
# Improving speed of accessing file contents<br />
# We now pull battery serial numbers from DJI Mavic Mini<br />
# Better support for Yellowbrick database server<br />
# File Details are now a JSON child file called <code>FileDetails.json</code><br />
# MP4 file details now includes GoPro details<br />
# New "differential" load capability<br />
# Extract GoPro Karma flight logs<br />
# TruxtonCLI command line tool has had many commands added to it<br />
# Python support now requires 3.9<br />
# Improved quality of Author artifacts coming from RTF files<br />
# Better ASCII identification<br />
# Fewer false-positives when identifying Targa files<br />
# Better cleaning up of log files (avoid disk fill up)<br />
# Parsing Unicode filenames from LNK files<br />
# Faster Message Bus IO<br />
# Better management of ETL processes<br />
# Better parsing of EVTX files<br />
# Better parsing of authors from PDF files<br />
# Added support for photographs embedded in vCards<br />
# Support Python 3.9<br />
# Better transliteration of non-English text<br />
# Identification of Windows Raw Memory Dumps<br />
# Scanning for AES crypto keys<br />
# Optionally backup and/or publish media immediately upon completion of load<br />
# New File Origin: vCard Attachment<br />
# New Location Types:<br />
## Meeting - where a meeting took place<br />
## Arrest - where a suspect was arrested<br />
## Home<br />
# New Event Types:<br />
## Office Alert - Alerts generated by MS-Office<br />
## Time Changed - When the time on a machine was changed<br />
# Exporting can now optionally include content<br />
# Added publish export option - allows you to export directly to another Truxton instance.<br />
# Show better indicator when media exists outside of investigation in the context of artifacts<br />
# Query Builder improvements<br />
## Added Query by ID rule<br />
## Added full path searching<br />
## Tag Category<br />
# Better feedback for progress for many long running events in the UI<br />
# Added manifest report that lists all reports<br />
# The Truxton Client has been renamed to Truxton Analyst<br />
# Better performance when viewing large amounts of file details<br />
# Display more media load information<br />
##Load duration<br />
##Load rate<br />
##Content index status <br />
# Added more relationship displays<br />
## similar items relationship (this uses the hash)<br />
## generic relationship (e.g. alias, home phone, etc)<br />
# Added placeholder display view for encrypted documents <br />
# Added ability to right click "view in maps" links to copy url<br />
# Added feature for user to hide eliminated files in filesystem views<br />
# Added more message participant field categories<br />
# Added origins filter to visual media page<br />
# Added dismiss button to toast notifications in the UI<br />
# Added bulk conversation downloads<br />
# Better support and speed improvements for large 7z archives<br />
# Added indexing for PowerPoint files (ppt and pptx). Extracted text now displays in the UI<br />
# Added more information to exif tag block label in findings display<br />
# Added more file types eligible for contact sheet generation <br />
# Randomized colors now have better contrast ratios<br />
# Most actions when viewing an investigation or media are now in a sub-menu<br />
# Added summary display to non-renderable reports (kmz, excel, etc). To give the user a heads-up on what's inside<br />
# Better photoshop psd drawing support<br />
# Add meaning to jpeg DQT precision integers file details<br />
# Add better MBOX parsing support<br />
# The line colors for grouped items in the timeline are now comprised of their child types.<br />
# Notes and findings are now the left-most column by default.<br />
# Better support for cpio files<br />
# Added Notify ETL<br />
# Added more alerting criteria<br />
##Hash Lists <br />
##Tags<br />
##Tag Categories<br />
# Show number of hashes parsed for hash list management page<br />
# Added display page for alerts. Shows what comprises the alert and which media has triggered the alert. <br />
# Moved tag configuration to its own section.<br />
# Bulk download improvements: <br />
## items can now be placed into a folder or a tar file<br />
## when using the md5.ext format, items are now in the same root directory offering natural deduplication.<br />
## Omit eliminated files from downloads.<br />
# Added counts to child artifacts correlations nav items.<br />
# Added ability to display censored images in a review.<br />
# Added ability to use integrated security when connecting to Truxton Postgres instances.<br />
# Sensitive site violations/list improvements<br />
## Can now manage from the UI<br />
## More information displayed in [[Sensitive Site List|SSV]] automatically applied tags<br />
## Added [[Sensitive Site List|SSV]] section to the media summary report<br />
# Added investigation summary report.<br />
<br />
==Bug Fixes==<br />
# Fix crash when viewing timeline<br />
# DJI drone packet parser was missing some packets<br />
# Offsets to entities were incorrect for large XRY files<br />
# Fix inconsistent rendering in hex viewer<br />
# Fixed NTFS Create Time<br />
# Moved calculation of MD5 to internal code to prevent FIPS Mode breakage<br />
# All streams from BZip files are now expanded<br />
# Truxton can now process file contents even if Windows moves it<br />
# Fixed UTF-8 strings coming from LNK files and parsing malformed LNKs<br />
# Missed identification of Compressed Manifest files<br />
# Endless loop expanding malformed BZip files<br />
# Manually created entities from hex view no longer allow null characters<br />
# Fixed several resource leaks in ETLs and Desktop UI<br />
# Endless loop when carving ASF files<br />
# Added new tab display for file information and related file details/notes<br />
# Fix some cases where photos marked as offensive we being displayed<br />
# Fix several issues in media summary report<br />
# Fix issue where media CSV export was incorrect<br />
# User can now delete a review when it completes<br />
# Fix several issues where the state of a grid was not saved between views<br />
# Fix inconsistent counts when certain filters were applied<br />
# Fix identification of OXPS files<br />
# Fix issue with parsing large MIME files<br />
# Don't show highlights of artifacts with unknown locations in hex viewer. However, inform the user of this information<br />
# Fix issue where multiple users on the same machine could not load Truxton Analyst.<br />
# Fix some issues with identifying EVTX files<br />
# Fix issue with getting certain registry string values<br />
# Fix issue where review images were not being censored when marked as offensive.<br />
<br />
==New File Types==<br />
# Extended Audible.com Audio<br />
# Chrome Extension<br />
# AVI Image<br />
# AVI Image Sequence<br />
# MPEG 4 Audio</div>Sam