Minor Release

This minor release contains some improvements and fixes listed below.

News:
#175 Synchronize chat view checkboxes of medias with table tab checkboxes (Luis Nassif)
#201 Merge decoded whatsapp accounts with wa accounts extracted from ufed xml in graph (Luis Nassif)
#197 Categorize HFS DECOMP streams when using fastmode (Luis Nassif)
#188 Support pure negative queries like -field1:xxx -field2:yyy (Luis Nassif)
#200 User and password parameters to connect to ElasticSearch (Luis Nassif)
#181 Unzip Libreoffice files to AppData\Local directory (Luis Nassif)
#193 Optimize whatsapp chat html (Fabio Pfeifer)
#179 Migrate to Lucene-5.5.5 (Luis Nassif)
Fixes:
#191 Checking media files in whatsapp chats works just when chat loading finishes (Luis Nassif)
#182 Pure negative queries like -field:xxx being inverted (Luis Nassif)
#187 Error generating graph when there is space in iped path (Luis Nassif)
#199 Error generating graph database on windows if output folder has accents (Luis Nassif)
#196 Error creating report from command line with graph generation enabled (Luis Nassif)
#189 Some iped gui processes left behind if errors occur opening cases (Luis Nassif)

Major release

This beta release contains a lot of new features and fixes, some listed below. Please see the ReleaseNotes.txt file for the full list.

#15 Graph analysis for communications (Filipe Simões and Luis Nassif)
#62 Resume aborted or stopped processing: new options --continue & --restart (Luis Nassif)
#85 Audio transcription: implementations with Azure and Google cloud, must set credentials (Luis Nassif)
#156 First version of similar image search feature, disabled by default (Wladimir Leite)
#26 Initial ElasticSearch indexing module, not accessed by java GUI for now (Luis Nassif)
#29 Improved HexViewer with goto, search, charset selection and layout customization (Guilherme Dutra)
#70 & #152 Regexes and validators for bitcoin cash, ethereum, ripple and bitcoin private keys (Fabio Pfeifer)
#25 Store small subitems, thumbs and ocr text in containers, speeding up case copying and deletion (Luis Nassif)
#61 Parsers for torrent and resume.dat files (Fabio Pfeifer)
#31 Parser for Windows 10 user activities timeline (Matheus Bichara)
#14 Basic parser for SkypeV12 (Patrick Bernardina)
#60 Viewer for Autocad DWG files (Alberto Magno)

Maintenance release

Attention Linux users: To use this release, you will need to recompile sleuthkit (original or the updated fork, see wiki) because of #16.

Fixes:

• Profile fastmode not working in v3.17 (#30)
• HtmlViewer is downloading external resources since 3.16 (#22)
• Typed evidence description not included in html report (#37)
• Records from sqlites in wal mode may be missed (#21)
• Range searches in internal dates (exif, office, message-date...) not working (#19)
• Error reading files on Linux without patch in sleuthkit (#16)
• Retry sleuthkit sqlite read errors (#38)
• Fix parsing of carved vcards (PR #40) by Fabio Pfeifer

Maintenance release

Attention for non english users: since 3.17, if you change the default locale (language), you must configure default processing options in profiles/[lang]/default. If you change config files in root folder, now the tool will abort processing warning about that.

News:

• Check and abort if user changes default locale and default english configuration files
• Changed communication with external robustImageReaders from sockets to pipes
• Better pooling, increased timeout and communication checks with robustImageReaders

Fixes:

• NullPointerException in PhotoDNA module
• Back compatibility of PhotoDNA module with 3.16.x version
• -ocr option did not work with bookmark names or enableExternalParsing on
• useNIOFSDirectory option did not work properly
• Rare infinite loop in robustImageReader restarting if mmap is interrupted

First English Release

News:

• Changed default locale and configuration files to english
• Moved all source code to github
• Moved custom dependencies from internal to external repo
• Report dialog to fill in case information
• Created json format to store and load report info
• Embedded fast random forest nudity detection model
• Allow opening multicases from iped program folder
• Show warning info instead of aborting when optional databases are not found
• Updated project and thirdparty licenses, moved them to root project
• Removes photoDNA compile dependency

Fixes:

• back compatibility of IPEDSource class
• FileNotFoundException when opening case while processing with some profile
• Fix NSRL importing error

Last Portuguese Major Release

This is the last major version using portuguese language by default. It will be supported for some while and future fixes could be back ported. Important features of 3.16.x series are:

• APFS basic support (thanks to BlackBag)
• Python processing modules
• Nudity detection using Yahoo open-nsfw deeplearning model
• Microsoft PhotoDNA plugin for law enforcement
• Basic Web API for accessing remote cases
• Validators for regex module, bitcoin wallet regex and validator
• Data carving refactoring, better zip and eml carving
• Carvers and parsers for kml, gpx, der, vcard
• Better parsing of WhatsApp system messages and iphone attachment linking
• Custom parsers for Chrome, Firefox, Edge and Safari histories
• Update to Sleuthkit-4.6.5 with backported fixes of 4.6.6
• Support for AD1 v4

Versão 3.5.1

Versão 3.5.1

Initial public release