Difference between revisions of "Release 2016-10-11"

From truxwiki.com
Jump to navigation Jump to search
 
(One intermediate revision by the same user not shown)
Line 1: Line 1:
 
=Truxton 1.164.7254.864=
 
=Truxton 1.164.7254.864=
−
[[Release 2016-09-15|<<]] Released 2016-10-11[[Release 2016-10-31|>>]]
+
[[Release 2016-09-15|<<]] Released 2016-10-11 [[Release 2016-10-31|>>]]
  
 
==Improvements==
 
==Improvements==
−
# New installation method, Setup.exe. This executable will detect the need for Java and PostgreSQL and spawn those installers before starting the Truxton installer. Also, if your license key information is stored in a file named "License.txt" in the same folder as Truxton.msi, the installer will automatically register your copy of Truxton. Hashsets shipped in the ISO will automatically be copied to the installed machine.
+
# You can now add analyst notes to anything.
−
# Desktop: new "Lindemeyer Leap" capability to click on a file's Media from the browse (query) result and be taken to that file's position in the filesystem on the media summary page.
+
# We can now extract GPS track log info from GoPro videos.
−
# "Remove" media button has been relabeled to "Uninclude" to reinforce that no data will be deleted from the database.
+
# CreateHashList.exe has been updated to work with the current schema.
−
# Reports are now the first tab on the Investigation page.
+
# New line style for photo field of view in KML makes it easier to see which direction a camera was pointed when a photo was taken.
−
# Media being loaded can be paused or resumed.
+
# The desktop preview pane will now render HTML.
−
# Automatically generated Investigation details make more sense. It is now a date and time rather than a big long serial number looking thing.
+
# Details from E01 fields is now put into the media description by default.
−
# Truxton works with PostgreSQL 9.6. This is now included in the install package.
+
# When reporting a bug, we now produce a ZIP file of the log files.
−
# All ETL processes now have an application name that will show in the database administrator (PgAdmin) user interface. This tells you which ETLs are connected to the server.
+
# New "Author" Entity. We can now track authors of documents across investigations.
−
 
+
# You can now rotate, pan and zoom images in the desktop viewer.
−
==New File Types==
+
# Hash List reports now include the files that hit rather than just a count of the number of hits in each list.
−
# [[Type_GoPro_Version|GoPro Version]] - A text file that GoPro puts on their SD cards. Contains camera serial number and WiFi MAC address.
+
# Media now has an expiration date.
−
# [[Type_System_Deployment_Image|System Deployment Image]] - Microsoft bootable image file.
+
# We now have a unified file system tree view.
−
# [[Type_VirtualBox_Disk_Image|VirtualBox Disk Image]] - Oracle disk image file.
 
  
 
==Bug Fixes==
 
==Bug Fixes==
−
# The number of applications installed in the Media Summary Report is now correct.
+
# The Yara ETL now monitors the status of the rules file. Any changes are immediately picked up.
−
# Cached reports would sometimes be generated twice, SOLR indexing of meta data wasn't getting executed.
+
# Permissions on configuration files and program data folders is fixed.
−
# ETL processes no longer create installation logs.
+
# Identification of Apple-generated MIME messages is now detected.
−
# Some timeline types were not being displayed in the timeline.
+
# Short videos were not having contact sheets made.
−
# Special folders (Media, Root, Partition, etc.) no longer have a status of "empty eliminated"
+
# Physical Disk Offsets for FAT file systems is now supported.
−
# Apple [[Type_Apple_Disk_Image|DMG]] files are now properly identified.
+
# E01's of physical RAM are now handled correctly. The resulting file is of type "Raw Memory"
−
# Carve files and Master Boot Record parentage is fixed.
+
# A number of entities weren't being sourced correctly in the Investigator Findings report.
−
# Some depot file entries were not being made to the database making file content retrieval impossible.
 

Latest revision as of 21:25, 5 June 2024

Truxton 1.164.7254.864

<< Released 2016-10-11 >>

Improvements

  1. You can now add analyst notes to anything.
  2. We can now extract GPS track log info from GoPro videos.
  3. CreateHashList.exe has been updated to work with the current schema.
  4. New line style for photo field of view in KML makes it easier to see which direction a camera was pointed when a photo was taken.
  5. The desktop preview pane will now render HTML.
  6. Details from E01 fields is now put into the media description by default.
  7. When reporting a bug, we now produce a ZIP file of the log files.
  8. New "Author" Entity. We can now track authors of documents across investigations.
  9. You can now rotate, pan and zoom images in the desktop viewer.
  10. Hash List reports now include the files that hit rather than just a count of the number of hits in each list.
  11. Media now has an expiration date.
  12. We now have a unified file system tree view.

Bug Fixes

  1. The Yara ETL now monitors the status of the rules file. Any changes are immediately picked up.
  2. Permissions on configuration files and program data folders is fixed.
  3. Identification of Apple-generated MIME messages is now detected.
  4. Short videos were not having contact sheets made.
  5. Physical Disk Offsets for FAT file systems is now supported.
  6. E01's of physical RAM are now handled correctly. The resulting file is of type "Raw Memory"
  7. A number of entities weren't being sourced correctly in the Investigator Findings report.
Retrieved from "https://truxwiki.com/index.php?title=Release_2016-10-11&oldid=9589"