Softpedia >Mac >Security >Autopsy Forensic Browser >  Changelog

Autopsy Forensic Browser Changelog

What's new in Autopsy Forensic Browser 4.1.0

Jul 25, 2016
  • New list view in Timeline tool
  • VMWare virtual machine files (vmdk) and Microsoft Virtual Hard Drives (vhd) can be added as data sources.
  • New ingest module detects vmdk and vhd files embedded in other data sources and adds them as data sources.
  • Text associated with blackboard artifacts is indexed and searched for keywords.
  • Custom (user-defined) blackboard artifact and attribute types are displayed in the UI and included in reports.
  • File size and MIME type conditions can be specified for interesting files set membership rules.
  • Assorted bug fixes and minor enhancements.

New in Autopsy Forensic Browser 4.0.0 (Jan 26, 2016)

  • Multi-user cases supported that allow collaboration using network-based services.
  • Image Gallery feature released.
  • Assorted minor fixes and enhancements

New in Autopsy Forensic Browser 3.1.3 (Jan 26, 2016)

  • New Embedded File Extractor module that incorporates ZIP file module and extracts images from Office documents
  • Views area counts updates when ZIP files and such are found
  • Updates to python scripting for Python 2.7, scripts are reloaded each time ingest is run, and errors are better shown.
  • Updated right click actions to be consistent across all file types
  • Changed logic of Interesting Files module to look for substrings of parent path.
  • Lots of minor fixes and enhancements

New in Autopsy Forensic Browser 3.1.1 (Nov 4, 2014)

  • Improvements:
  • New time line feature
  • New Interesting Files module
  • Added support for Python modules
  • Updated HTML report
  • Media Content viewer uses blackboard artifacts and detects PNG by sig.
  • New logo
  • Bug Fixes:
  • Adding local disk errors
  • ZIP files inside of RAR files are properly extracted

New in Autopsy Forensic Browser 3.1.0 Beta 1 (Jul 31, 2014)

  • Improvements:
  • Multi-threaded pipelines
  • File type ingest module
  • File extension mismatch ingest module
  • Android ingest module
  • KML report module
  • Tags can be deleted
  • Hash databases can be created and maintained

New in Autopsy Forensic Browser 3.0.9 (Apr 1, 2014)

  • Bug Fixes:
  • Regular expression keyword search works on file names.
  • Fixed thunderbird parser for subject and dates
  • Fixed errors in hex viewer
  • Improvements:
  • Enhanced reporting on keyword search module errors
  • Updated SQLite to 3.8.0
  • More lazy loading to help performance with big folders and sets of files
  • Times can be displayed in local time or GMT
  • New "EnCase-style" report that lists files and metadata in tab delimited file
  • Changed report wizard to make one report at a time
  • report improvements (only regnerate if data exists)
  • more error messages if recent activity module fails
  • more error checking in recent activity module and don't bail as quickly
  • Cleanup of recent activity module
  • better handle if ingest module throws exception during init()
  • do not run ingest if any module faile to init()
  • Added FILE_DONE event to ingest manager
  • Added search engine parsers for linkedin, twitter, and facebook
  • HTML text is better formatted
  • Report generation performance
  • HTML parser is skipped for files > 50MB.
  • Removed xdock definitions -> some claim this helps with memory problems

New in Autopsy Forensic Browser 3.0.7 (Apr 1, 2014)

  • New features:
  • 64-bit support (JavaFX for video)
  • Multi-select
  • different sized thumbnails
  • Custom tags persist across runs of the app
  • RegRipper is run on each hive and raw output is available.
  • Metadata content viewer
  • Basic sanity check when adding images to see if parts could be missing.
  • Improvements:
  • EXIF module uses only signatures
  • File size View does not show unalloc files
  • Tagged files in report show more data
  • Updated test scripts
  • Better OS X look and feel
  • Bugfixes:
  • Several -> Didn't keep good track in this file.
  • Error messages from adding disk to database are better displayed.
  • RecentActivity better reports errors parsing data

New in Autopsy Forensic Browser 3.0.6 (Apr 1, 2014)

  • New features:
  • Logical files and folders support
  • New file views in directory tree to view: deleted, executable, archive files and files by size
  • ext4 and yaffs2 support (via TSK 4.1.0)
  • Improvements:
  • Improvements to tagging of files and keyword search results
  • Any file and folder can be selectively ingested using the directory tree view
  • Bugfixes:
  • Keyword Search: fix when Solr does not cleanly shutdown
  • fix for "Process Unallocated Space" option doesn't do anything
  • fixed result viewer for "File Search by MD5 Hash"
  • fix Solr, Timeline and RecentActivity issues with java 7.0.21
  • Views->Recent Files showing inconsistent results when clicked many times
  • reduced memory usage in Timeline

New in Autopsy Forensic Browser 3.0.5 (Apr 1, 2014)

  • New features:
  • Archive extractor ingest module (uses 7zip)
  • Timeline (Beta)
  • Improvements:
  • Sleuthkit-4.0.2 and libewf-20130128
  • improved image loading in Media View and Thumbnail View (faster loading, handles large files better)
  • improve Keyword Search file indexing (use detected mime-type instead of file extension)
  • exif module better jpeg detection using signature and not only file extension.
  • show children counts in directory tree
  • Ingest Message Inbox showing which messages are new better
  • Bugfixes:
  • fixed memory leaks in "Add Image"
  • The "media view" tab is inactive for deleted files (#165)
  • show error message in hex and string viewer if specific offset of a file could not be read.
  • file search actions not always enabled when new case is open.
  • fixed directory tree history being reset when tree is refreshed.

New in Autopsy Forensic Browser 3.0.0 Beta 1 (Aug 17, 2011)

  • cluster incompatible release version

New in Autopsy Forensic Browser 2.24 (Apr 1, 2010)

  • Bug Fix: resolved issue 2950986 to support HFS directories.

New in Autopsy Forensic Browser 2.21 (Feb 3, 2009)

  • Bug Fix: Changed case management code to not error when 'dls ...' line was encountered.
  • Bug Fix: Fixed bug 2288406 (parsing of new fls -l format when file name searching and deleted file listing)

New in Autopsy Forensic Browser 2.20 (Oct 25, 2008)

  • Updated FAT sizes based on new "special" files.
  • Updated NTFS processing for orphan files / removed ifind -p etc.
  • Updated mactime and time formats to ISO formats.
  • Changed usage to new TSK d* to blk* names.
  • Bug Fix: Input check on host was printing invalid host values w/out encoding HTML entities.
  • HFS support is enabled if TSK was compiled with support for it.
  • Bug Fix: Added some more HTML entity escaping to case management values (such as description).
  • Added perl version check back into configure, but used perl $] variable to do checking.