New in version 0.5.19

October 10th, 2013
  • The partition-agent extension automatically adds partitions to case when a data source is set. New registry report: "Shared Folders".
  • Minor improvements have been made.

New in version 0.5.18 (April 24th, 2013)

  • This version features the new Gigatribe Agent extension, an extension to browse Gigatribe chat files.
  • Five new registry reports have been added to the hive-report extension: Gigatribe accounts, Gigatribe download folders, Gigatribe requested passwords, Ares Search History, and Wifi Network List.
  • Minor improvements and bugfixes have been made.

New in version 0.5.17 (March 25th, 2013)

  • This version adds support for physical device's datasources.
  • Minor improvements were made.
  • Bugs were fixed.

New in version 0.5.16 (January 18th, 2013)

  • This version features the Turing extension, an extension to handle cryptographic services.
  • It is fully integrated to the Hive (registry) extension, so that when registry files are opened, it automatically records the user account password hashes and tests keywords such as LSA secrets, e-mail passwords, and Internet Explorer Autocomplete, among others. All hashes and passwords found are stored in an SQLite database.
  • The Turing extension exports and imports to/from John The Ripper .pot files and to John The Ripper hash files.

New in version 0.5.15 (November 2nd, 2012)

  • The Partition Viewer extension provides a viewer for partition tables.
  • The GTK-UI Treeview extension implements a treeview based on treenodes.
  • Minor improvements have been made.

New in version 0.5.14 (August 20th, 2012)

  • This version supports reading multiple segment EWF files.
  • Minor improvements and bugfixes have been made.

New in version 0.5.12 (April 21st, 2012)

  • This version features the Skype Agent extension, an extension to browse Skype log files and show calls, chats, contacts, profiles, file transfers, SMS, and voicemails.

New in version 0.5.11 (January 26th, 2012)

  • This version features 14 new registry reports: autorun, services, IE download folder, IE typed URLs, MRU files opened/saved, MRU files executed, search assistant, printer ports, processors, all devices, enumerated devices, HID devices, network devices, and stream devices.
  • Minor improvements were made.

New in version 0.5.10 (December 21st, 2011)

  • This version introduces the Integrated Case Environment (ICE) extension, which replaces the Case Viewer extension.
  • A new and improved data representation of the case model was developed.
  • Several minor improvements were made.