X-Ways Forensics 14.5 Log Out | Topics | Search
Moderators | Edit Profile

X-Ways Forum » Public Announcements » X-Ways Forensics 14.5 « Previous Next »

Author Message
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Wednesday, Sep 26, 2007 - 2:28:   

A preview version of X-Ways Forensics 14.5 is now available. The download link can be retrieved by querying one's license status.

What's new?

* It is now possible to assemble RAID systems that consist of up to 16 instead of 10 component disks.

* One additional RAID 5 pattern is now supported: Forward Dynamic Parity, a.k.a. Right Synchronous, one of the four algorithms used in software RAIDs under Linux. The other three Linux algorithms are supported by X-Ways Forensics already.

* Ability to specify a non-standard parity start component disk. E.g. Intel SRCU42L RAID controllers use a disk other than No. 1 for their forward parity pattern.

* Reading from multi-session CDs and DVDs has become considerably faster because WinHex and X-Ways Forensics now skip blank sectors. The difference will be noticeable e.g. when imaging, hashing, and searching such media.

* More information on optical media in the technical details report.

* The process of listing the clusters allocated to huge files can now be greatly accelerated by omitting the clusters in the middle of a series of contiguous clusters from the list. Each omission is indicated by a special line in square brackets, where the number of omitted clusters is specified. That the number of the last cluster in a fragment is listed makes it easy to navigate to the end of each fragment. This new option can be found in the context menu of a cluster list and takes effect on the next cluster list that is brought up.

* In the case report, report table cells can now optionally have borders and padding. The font size used in report tables and in the log is now user-definable, which is useful to save space/paper if you render the font size smaller (e.g. 10 points instead of the default of 12). More changes are planned for the case report, recommendations welcome.

* An evidence file container can now optionally store the name of its creator. The internal designation of a container can now contain up to 63 characters instead of 31. A container now internally records its creation date and time as well as its last modification date and time.

* Better tailored metadata for inclusion in comments. Metadata for Windows Write files (.wri).

* If physical "superfloppy" media (unpartitioned, consisting of just a single volume) are imaged as .e01 evidence files, these files will now be marked as evidence files of logical volumes instead of physical disks. This avoids the unnecessary inclusion of an additional physical evidence object when adding such an evidence file to a case.

* Fixed an error that could prevent complete index optimization if that process had been aborted before.

* Some minor improvements.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Friday, Sep 28, 2007 - 12:53:   

Preview 2:

* User-defined metadata in OLE2 compound files as used e.g. when exporting documents in OpenOffice as MS Office file types. More OLE2 metadata.

* Ability to use the directory browser and preview files during an ongoing volume snapshot refinement if that operation is paused, to check the preliminary results (e.g. to verify that the settings used for the file header signature search have the desired effect).

* Some small fixes of errors in Preview 1.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Thursday, Oct 4, 2007 - 23:34:   

Preview 3:

* Fixed instability issue with long paths.

* Some minor improvements and fixes.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Friday, Oct 5, 2007 - 2:32:   

Preview 4.

(X-Ways Forensics 14.5 Preview 3 incorrectly identified itself as X-Ways Investigator.)
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Wednesday, Oct 10, 2007 - 16:42:   

Beta:

* Metadata in .mdi files (MS Office document imaging) can now be seen in Details mode.

* Even more metadata from MS Word documents in Details mode.

* Same fix level as v14.4 SR-2.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Sunday, Oct 28, 2007 - 8:06:   

Beta 2:

* It's now possible to remove physical evidence objects from the case that have child objects (partitions) without having to remove the child object first.

* A "Save As" command was introduced for cases, which allows to save the case with a new internal case filename and/or in a different directory. When using this command, the entire case subdirectory will be copied, too. Available also for a case that was opened as read-only if that happened voluntarily and not because of password protection.

* When working with a case opened in read-only mode, the user is now reminded of that whenever the auto-save interval elapses and when an evidence object whose volume snapshot has changed is about to be closed. Useful when working in read-only mode inadvertently, e.g. after having decided to open a case that was not properly closed in read-only mode, without actually understanding the consequences.

* Some minor improvements.

* There were occasional exception errors when interpreting image files in the first beta version. They was fixed.

* Fixes of v14.4 SR-3.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Friday, Nov 2, 2007 - 13:14:   

v14.5 has just been released.

Additional improvements:

* When including report tables in the report, comments on files are no longer truncated.

* The lower word length limit in indexing has been decreased from 3 to 2 to allow for 2-character searches in Chinese if required by the user in certain cases (e.g. for names).
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Wednesday, Nov 7, 2007 - 19:41:   

The inability to create reports without overwriting an already existing file will be fixed with SR-1. Until then, as a work-around please create a file first (e.g. right-click in the file selection dialog window, create new file).
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Thursday, Nov 8, 2007 - 23:59:   

SR-1:

* Fixed inability to create the case report when not overwriting an existing file.

* Files in archives in containers were displayed in the gallery only with an icon instead of a thumbnail despite the option in General Options. This was fixed.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Saturday, Nov 10, 2007 - 2:11:   

SR-2:

* Fixed output of garbage characters in the comments field in the case report.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Tuesday, Nov 27, 2007 - 1:48:   

SR-3:

* Improved detection of cirular links in the directory tree of file systems.

* Some minor fixes.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Thursday, Mar 13, 2008 - 12:41:   

SR-4:

* Some of the fixes introduced in later versions. Available to customers on request.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Sunday, Jul 27, 2008 - 19:43:   

SR-5:

* Some of the fixes introduced in later versions. Available to customers on request. Final release.

Add Your Message Here
Post:
Username: Posting Information:
Only registered users may post messages here, i.e. you need to have a profile.
Password:
Options: Enable HTML code in message
Automatically activate URLs in message
Action:
Forum operated by X-Ways Software Technology AG.