* Improved stability while processing EDB databases. * Event extraction from Apple FSEvent logs. * Fixed inability of v19.0 to copy certain files along with the case report under certain circumstances if the type status was "newly identified". In v18.8 and later, full filename matches should have been ignored only if the type status was "mismatch detected". * Full filename matches in the Type filter did not count if the type status was "newly identified". * X-Tension API: Two new kinds of evidence object IDs can now be retrieved with the XWF_GetEvObjProp function (nPropType 3 and 4). * Newly identified 3GP files were erroneously assigned to the category "Other/unknown type" by the file type verification in v19.0 SR-1 and later. * New case conversion option for textual data in UTF-16 (Edit menu). * Option to print selected fields on the cover page in bold letters and in a different color, to point the attention of the reader to a certain aspect. * Under Windows Vista and later, attachments are now conveniently linked from the alternative e-mail representation in Preview mode. * Directory icons for evidence objects that are directories, in the Case Data window, so that they can be distinguished from volumes. * The relevance of a file now more reliably takes into account whether or not a picture is a screenshot. * The type status "mismatch detected" now has an effect on the assumed relevance of a file.
A preview HTML file is generated, and events are output to the event list. * Support for Google's Chrome sync database, where information can be found that is synchronized across devices, such as bookmarks, form history, typed URLs, synced devices and much more. NEW: If when querying your licenses you do not receive any e-mail message at your work address because your organization has the sending server blacklisted, you now have the option (here) to get the e-mails sent from an alternative server (different domain, different IP address), for a 2nd chance to actually receive something. The download link can be retrieved as always by querying one's license status. A preview version of the dongle-based edition of X-Ways Forensics 19.1 is now available.
0 kommentar(er)
