OSForensics

OSForensics 11.1.1003​

Feb 28, 2025

• Auto Triage:
• New Reports generated after running triage under "Suggested Actions" will prompt confirmation before opening the report in default system viewer (to prevent undesired opening forensic report on the suspect's computer)
• Email Viewer:
• Fixed possible crash caused by heap corruption (string buffer overrun) when exporting emails
• File Hashing - Hash Sets:
• Added result summary when importing Project VIC hash set
• Added option to cancel import when importing Project VIC hash set
• Updated multi-file hash lookup to show current file more accurately
• Fixed issue where it would import to the wrong hash database
• Fixed hash database not being populated after NSRL import
• Fixed NSRL import error for long file names
• File Viewer:
• Fixed potential file path buffer overflow when getting case device info. For very long / deep paths this could result in a crash of OSF when viewing files

Kliknij aby rozwinąć...

OSForensics 11.1 Build 1008​

​

• Hash Sets
  • Fixed crash when 'New Set...' is used when no DBs are active
  • Fixed controls not being enabled if new DB was created and there are no existing DBs
  • Fixed controls not being disabled when deleting last DB
• Misc
  • Fixed XML file existence validation when importing cases to prevent crashes
  • Revert libbde back to 20220807 as it wasn't loading some bitlocker images
  • Updated VolatilityWorkbench to 3.0.1012
  • Prevent processes without administrator privileges from accessing the DirectIO kernel device to reduce security vulnerabilities

Kliknij aby rozwinąć...