

This allows for recovery of deleted partitions (depending on what remnants are left on disk) Added support for detecting hidden file systems via on entire disk images.artifact found within a database) that could not be added to case. OSForensics will add tagged files but warn and provide a list of tagged items that are references (e.g. Added option to "Add to Case" when right click on multiple tagged items.Decreased the size of the Deleted Icon (X) overlay over image thumbnails.Will now clear user activity config (date range etc) each time a new case is loaded.Fixed bug where all USB entries weren't displayed unless the "event log" option was selected as well.Will now clear create signature config (output type, hashes, etc) each time a new case is loaded.Fixed bug where displayed sort options did not match function (email + attachments).for Firefox, it is different based on OS) Fixed Chrome/Firefox Cache image exclusions (caches were in different places than expected, e.g.

Updated help file to add more detail on how 'Filter Types' is used.Fixed bug where if 'save file' option is used on a HFS file system and with 2 or more files selected, the saved file name was incorrectly output.Fixed bug where OSF crashed when trying to retrieve file info from a file that does not exist.Now if closed while minimized, FSB will not save existing dimensions and reuse the last saved values Issue was caused if previous instance of FSB was minimized when closed. Fixed issue of FSB starting in extremely minimized state.Fixed bug where the custom case directories a user can specify in the config settings did not get reset when switching between cases.Enabled "Show $FILE_NAME Dates (NTFS)" configuration option automatically if any of the $FILE_NAME columns are selected when configuring displayed columns.NTFS, fixed bug in traversing $I30 entries in directories spanning multiple MFT records.Direct Image Access / Filesystem support.Cleaned up text/message for the Save Checked Deleted Files confirmation dialog.Fixed possible crash (crash was due to uncaught exception from MoveFile failure) when changing the case location in the Edit Case Details dialog when paths are longer than MAX_PATH.Fixed a bug that could occur on the off-chance that system time is the same for two searches.
#010 editor v7.0 binary template windows
This caused a leak when drawing windows containing the Screen Capture button (eg. Fixed GDI handle leak when drawing button.


Fixed reading of volume bitmap failure due to sector unaligned access.Added check for whether VirtualBox extension pack is installed if USB 2.0 or USB 3.0 controller is selected.Added more verbose debug logging when obtaining privileges to mount a registry hive.
