X-Ways Forensics 12.05 Log Out | Topics | Search
Moderators | Edit Profile

X-Ways Forum » Public Announcements » X-Ways Forensics 12.05 « Previous Next »

Author Message
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann (Admin)
Posted on Wednesday, Feb 16, 2005 - 23:07:   

A preview version of X-Ways Forensics 12.05 is now available for owners of a forensic license. v12.05 will be a free update for owners of a license issued for v11.15 and later. The download link can be retrieved by querying one's license status.

What's new?

* Loading huge contents table (with hundreds of thousands of items) into the directory browser is now considerably (!) faster.

* There are new optional columns in the directory browser for the path and the record/inode modification date and time. Hidden columns (with a width of 0) can be unhidden via the dialog window that opens when you right-click the list header. (Some hidden columns are reserved for future use.)

* The general Position Manager content and evidence-related annotations and search hits are no longer displayed in a separate dialog window, but in the same window as the actual data. Single-clicking items in the list of annotations or search hits conveniently jumps to that position in the sectors view. Also search hits on logical drives/partitions or images of the same are now listed with filename and file path in separate columns, which are fully sortable. This is the end of the Position Manager as we know it. Comments on this new solution welcome.

* Single-clicking items in the directory browser and case tree window is now sufficient for the screen to update.

* File Recovery by Type can now optionally recover files with individual, file type based default file sizes. Like this you could e.g. recover large MPEG and small JPEG files at the same time. File type based sizes can be specified in an optional 6th column in the "File Type Signatures.txt" file.

* There is now a virtual file "free space" in the directory browser that allows to open, view, and search unallocated cluster in a convenient way without extracting them first. (specialist and forensic licenses only)

* There is a new option that allows to simplify the user interface (reduce the total number of popup menus) if the forensic interface (=the case data window) is active. See Options menu.

* You can now create a contents table using the logical search function. Each file with at least one hit for at least one of the keywords provided will be added to that contents table. This is great way to narrow down huge contents tables to files with relevant content. (since v12.0 SR-4)

* It is now possible to open and search files via the directory browser optionally including their slack space (see General Options). (since v12.0 SR-11)

* WinHex can now explore archives in archives (i.e. up to the second level) when using the directory browser, when creating a contents table, and when searching logically. (since v12.0 SR-3)

* The creation of contents table on NTFS drives with a minimum set of options selected is now considerably faster. (since v12.0 SR-x)

* There is now a "Sync" button that causes the file that a currently displayed cluster is assigned to to be auto-selected in the directory browser. The directory tree switches to that file's directory as well. (since v12.0 SR-11, improved in v12.05)

* An error was fixed in the SHA-1 and SHA-256 implementation for data in excess of 512 MB. (since v12.0 SR-9)

* An error was fixed in ReiserFS support. (since v12.0 SR-17)

* WinHex can now list NTFS reparse points (a.k.a. junction points) when exploring directories with the directory browser and when creating contents tables. (since v12.0 SR-4)

* Many other minor improvements.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann (Admin)
Posted on Thursday, Feb 17, 2005 - 21:54:   

v12.05 Preview 3 now available, with several fixes.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann (Admin)
Posted on Sunday, Feb 20, 2005 - 22:57:   

v12.05 Preview 4 now available, with several fixes and improvements.

* Forensic licenses now optionally allow to display the context of the search hits right within the Position Manager.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann (Admin)
Posted on Monday, Feb 21, 2005 - 18:12:   

v12.05 Preview 6 now available, with some fixes.

(Forgot to announce Preview 5.)

Known problem: Some small rare errors in how items in the directory browsers are sorted.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann (Admin)
Posted on Tuesday, Feb 22, 2005 - 18:46:   

Another preliminary version is now available.

* Including the contents of archives (ZIP, RAR, GZ, ...) in logical search operations is now optional.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann (Admin)
Posted on Wednesday, Feb 23, 2005 - 18:58:   

v12.05 has been released. The preview versions are no longer available.
Forum operated by X-Ways Software Technology AG.