Week 14! Software updates Tz works released their March update last week. Several of their tools were updated including jmp, pf, vssenum, cafae, as well as various bug fixes. The updates were as follows: – Jump List Parsing – jmp (version 0.38)- updated to support Win10 jumplists – Prefetch Parsing – pf (version 1.16) – […]
Week 13 Software updates X-ways 17.4 SR8 has been released with minor improvements and bug fixes X-Ways Forensics 18.7 SR-8 Craig Wilson updated NetAnalysis to version 2.4 and HstEx to version 4.4. “This release brings support for Google Chrome’s History Provider Cache and Network Action Predictors, Microsoft’s Internet Explorer and Edge Typed URLs and Bookmarking […]
Week 12! I’ve had to cut this week short by a day because of other commitments, but I’ll just add the rest to next weeks update. Software updates Adam at Hexacorn updated dexray to version 0.6. The update adds support avast quarantine files. DeXRAY – Update Oxygen forensics detective has updated to version 8.3. The […]
Week 11! Software updates Eric Zimmerman updated his AppCompatCacheParser to version 0.0.7.0. This included package updates and some clean up AppCompatCacheParser v0.0.7.0 Paul Sanderson updated Forensic Browser for Sqlite to version 2.7.6. This update includes a number of enhancements and bug fixes New release 2.7.6 – lots of enhancements X-ways 17.4 SR7 has been released […]
Week 10! Software Updates: Craig Wilson at Digital Detective has updated his Blade file carving tool to version 1.12 and added a few new features and bug fixes. The main features are improved carving of OLE2 and ZIP files. I’m not sure if Datadump was previously part of blade but Wilson explains it’s a standalone […]
Week 9! Software Updates: Sumuri have updated Paladin Edge64 to version 6.08, to support newer technologies such as nvRAM and eMMC flash drives found in popular products such as the newer MacBooks and HP Stream computers. PALADIN (64-bit) – Version 6.08 Passware updated to 2016 v.2 with a few new features including data acquisition from […]
Week 8! Software Updates: Paul Sanderson made an update to Forensic Browser for SQLite with a few bug fixes. It’s now at version 2.7.5 (although the forum post says not yet released) FTK Imager has been updated to version 3.4.2. This update was mainly bug fixes but the major takeaway is that AD1’s are created […]
Week 7! Software Updates: DME Forensics updated DVR Examiner a couple weeks ago to 19.0 and I forgot to mention it. Then they released a minor update to 1.19.1 last week (that I also didn’t mentioned, apologies). The latest version adds a few more file systems (bn_MBR, SA_X and SA_x_264, ef_JPG and SSF0_P) and fixed […]
week 6 Software Updates: Eric Zimmerman added a few new switches to bstrings (now at version 1.0) to allow a user to specify an ASCII/unicode character range and code page. You are also now able to supply a file mask i.e. *.exe. bstrings 1.0 released! CRU has updated their write blocker testing utility to version […]
Tool updates Harlan has updated the samparse plugin for regripper. I e-mailed him during the week with a SAM file and a request and he had the plugin updated overnight. The new plugin extracts the values that are created when a user has created or link an account with a Microsoft Live account. As Harlan has […]
