X-Ways Forensics 21.0 Log Out | Topics | Search
Moderators | Edit Profile

X-Ways User Forum » Public Announcements » X-Ways Forensics 21.0 « Previous Next »

Author Message
Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Tuesday, Sep 5, 2023 - 4:19:   

A preview version of X-Ways Forensics 21.0 is now available. The URL of the download directory for all recent versions can be retrieved by querying one's license status as always.

What's new in v21.0 Preview 1?

* Ability to access the column header functionality solely with the keyboard, without using the mouse, by pressing Ctrl+H (H for header), to active or deactivate filters and to define columns as sort criteria.

* Menu command to take control of all the files in a directory in the currently used Windows system and give all users full access, recursively, in Tools | File Tools. Requires administrator rights.

* Improved ability to abort previewing or viewing large files with the viewer component, by moving the mouse cursor in the lower right corner of the viewer window.

* Internal graphics display library updated.

* Special simplified RVS command for the triage version of X-Ways Investigator (+104 in investigator.ini).

* Some of the improvements/fixes of v20.9 SR-4.
Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Monday, Sep 11, 2023 - 12:38:   

Preview 2:

* The picture content analysis functionality is now also available when volume snapshot refinement is applied to selected files.

* The maximum number of worker threads in X-Ways Forensics has been increased from 16 to 24 (subject to availability of processor cores).

* Regular expressions are now supported with \u Unicode values within square brackets, i.e. within sets of characters.

* Some minor improvements.
Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Wednesday, Sep 20, 2023 - 17:52:   

Preview 3:

* A previously existing file whose first cluster was reallocated according to the file system (shown as "1st cluster not available") can now be processed by volume snapshot refinement if you uncheck a new checkbox that causes them to be omitted. That means in particular that unrelated random data that does not belong to the file can be hashed and presented as that file's hash value although it most certainly was NOT that file's hash value. Previously X-Ways Forensics would have only budged and processed such a file if the file was specifically targeted via tagging or selecting. If X-Ways Forensics is forced to compute them, hashes of nonsensical data are now displayed in the directory browser in gray color, to remind the user that they should not be overinterpreted or expected to be found on other storage devices.

* The timestamp filter can now optionally combine the conditions for the various timestamp types (creation, modification, ...) with a logical AND instead of the default OR.
* The generating "software class" reported in Details mode was revised. There are now two more classes: scanner and web site builder. Examples of the latter include WIX, JIMDO, Site123, Squarespace, and Shopify.

* Another change in the Summary Table in Details mode is the new entry "propensity score". It can assume values from 1 to 99. The relevance computation is mainly based on that value. That value is an objective statistical probability for the picture having additional, removable, relevant metadata. It could also be also be designated as documentality, the quality of being able to serve as a document. One can check this additional information for its consistency. The propensity score generally exists for raster images (that are measured in pixes), in particular also for the formats PNG and WEBP.
Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Wednesday, Sep 27, 2023 - 16:27:   

Preview 4:

* There are now two different types of AND combinations for timestamp filters. A strict AND combination (fully checked) requires that all targeted timestamps are actually present/available. A soft AND combination (half checked) requires only all available timestamps to meet the filter condition (and at least one must be available).

* The timestamp filter is now accessible from the keyboard as well via Ctrl+H.

* A new internal label was introduced for Avatar/Identicon JPEG pictures. Such identicons are often smaller versions of avatars and exist on Tiktok, Twitter, Facebook, Instagram, Youtube, Quora, Gravatar, Pinterest and elsewhere.

* Support for iPhone 15 as a generating device.

* Discarding results of picture analysis and processing (by unchecking the "already done" box) now removes labels for identified photo content.

* Several minor improvements.

* Same fix level as v20.9 SR-4.
Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Thursday, Sep 28, 2023 - 17:48:   

Preview 4b:

* Fixed an exception error that occurred when starting v21.0 Preview 4 with the British English spelling of the user interface.

Add Your Message Here
Username: Posting Information:
Only registered users may post messages here, i.e. you need to have a profile.
Options: Enable HTML code in message
Automatically activate URLs in message
Forum operated by X-Ways Software Technology AG.