Release Notes: The partition-agent extension automatically adds partitions to case when a data source is set. New registry report: "Shared Folders". Minor improvements have been made.
Release Notes: This release features the new Gigatribe Agent extension, an extension to browse Gigatribe chat files. Five new registry reports have been added to the hive-report extension: Gigatribe accounts, Gigatribe download folders, Gigatribe requested passwords, Ares Search History, and Wifi Network List. Minor improvements and bugfixes have been made.
Release Notes: This release adds support for physical device's datasources. Minor improvements were made. Bugs were fixed.
Release Notes: This release features the Turing extension, an extension to handle cryptographic services. It is fully integrated to the Hive (registry) extension, so that when registry files are opened, it automatically records the user account password hashes and tests keywords such as LSA secrets, e-mail passwords, and Internet Explorer Autocomplete, among others. All hashes and passwords found are stored in an SQLite database. The Turing extension exports and imports to/from John The Ripper .pot files and to John The Ripper hash files.
Release Notes: The Partition Viewer extension provides a viewer for partition tables. The GTK-UI Treeview extension implements a treeview based on treenodes. Minor improvements have been made.
Release Notes: This release supports reading multiple segment EWF files. Minor improvements and bugfixes have been made.
Release Notes: This release adds support for Skype 5.x log files (main.db), makes the Hive extension show Protected Storage as a subtree under the PSSP registry key, and adds an Internet Explorer Autocomplete report.
Release Notes: This release features the Skype Agent extension, an extension to browse Skype log files and show calls, chats, contacts, profiles, file transfers, SMS, and voicemails.
Release Notes: This release features 14 new registry reports: autorun, services, IE download folder, IE typed URLs, MRU files opened/saved, MRU files executed, search assistant, printer ports, processors, all devices, enumerated devices, HID devices, network devices, and stream devices. Minor improvements were made.
Release Notes: This release introduces the Integrated Case Environment (ICE) extension, which replaces the Case Viewer extension. A new and improved data representation of the case model was developed. Several minor improvements were made.