Download

Forensic Explorer 64 bit - Full Version (Dongle Required)
5 Apr 2017v3.9.8.6414Download Full Version

Forensic Explorer 64 bit - Evaluation Version (Get 30 Day Key)
5 Apr 2017v3.9.8.6414Download Evaluation Version
Evaluation version does not support case saving, exporting or Live Boot.


Supported languages (select during install): EN  ID  ES  DE  ZH  TR 

» 32 bit

32bit Full Version (dongle required): ForensicExplorer-32bit-(v3.9.8.6376).exe

» View the change log...

5 Apr 2017 - v3.9.8.6414

  • Export Files - Added partition into export file path.
  • Bookmarking - Improved bookmarking speed.
  • Other minor updates.

--------------------------------------------------

23 Mar 2017 - v3.9.8.6390

  • Live Boot - Added capacity to add 7 additional HDDs to a virtual machine.
  • Merged File System > Tools > 'Clear Flags' and 'Clear Hash' into 'Clear Columns'.
  • Added OGG, OGV, RM, FLV to:
    - Skin Tone Analysis – Video Key Frames; and
    - Video – Extract Thumbnail Key Frames.

--------------------------------------------------

21 Mar 2017 - v3.9.8.6376

  • Fixed Entropy Analysis progress bar.
  • Other minor script updates.

--------------------------------------------------

17 Mar 2017 - v3.9.8.6364

  • Carving - Improved UNIMO .umv carving.
  • Google Earth KML - Fixed lat/long error in Turkish and German language.
  • Improved performance reading large drives with large unallocated clusters.

--------------------------------------------------

10 Mar 2017 - v3.9.8.6356

  • Add Device - Fixed error adding device with fragmented MFT attribute record occupying multiple clusters.
  • Auto Save - Changed default auto-save time in options from 20 to 60 minutes.
  • Carving - Added UNIMO Video (.umv) carving.
  • CETS Buttons - Added CETS category 00 to File System module buttons.
  • Gallery View - Improved Hot Key folder selection button in Gallery View.
  • Live Boot - Fixed Live Boot Deploy script for Turkish version.
  • Load Case - Fixed error loading auto-save of case.

--------------------------------------------------

1 Mar 2017 - v3.9.8.6298

  • Bookmarking - Added hot key category bookmarking to Gallery view.
  • Carving - Added Usenet-item file driver for carving of Usenet messages.
  • Copy/paste functions added to File System Record tab and Goto sector popup window.
  • DMG - Added header validation when adding DMG files as evidence.
  • Email Module - Fixed toolbar buttons incorrectly pointing to the File System module.
  • EML - Fixed display view error when viewing EML attachments.
  • LicenseManager is now translated.
  • Logging - Increased speed of writing verbose log files.
  • Fixed thread locking in multi-threaded command tasks.
  • Recycle Bin $I and $R naming update.
  • Thumb-cache - Fixed GDI Object leaks in Gallery View & Thumb-cache.
  • Thumb-cache - Limited to 1000 items in memory for better response time.
  • Translation updates.

--------------------------------------------------

17 Feb 2017 - v3.9.7.6230

  • Bookamrks - Fixed metadata display in Bookmarks module.
  • DMG - Improved support for DMG image files.
  • Hashing - Added Bookmark Files by Hash Match to Hash Match button.
  • Setup - Improved FEX installation file.

--------------------------------------------------

31 Jan 2017 - v3.9.7.6180

  • Hash Match - 'Hash Set' and 'Identified As' columns now handle multiple Hash Set matching.
  • Illicit Image Classification - Added categories 7,8,9 for folder creation script.
  • Illicit Image Classification - Gallery View toolbar classification buttons added (File System > Tools > Gallery View - Bookmark Illicit Images).
  • MOV files - Added support for additional MOV file types (atoms).
  • Text View - Fixed cursor over-run in Text data view.
  • Other minor updates and improvements.

--------------------------------------------------

17 Jan 2017 - v3.9.7.6164

  • Reports - Added RegEx search capability to the Bookmark Enumerator window.

--------------------------------------------------

16 Jan 2017 - v3.9.7.6162

  • Triage - Fixed error triaging a single registry file when 'Add File' used in the Evidence module.
  • Triage - Improved triage of RecentDocs.
  • Other minor updates.

--------------------------------------------------

8 Jan 2017 - v3.9.7.6152

  • Reports - Replaced Edit and Preview tabs with button & right click menu option.
  • Other minor updates.

--------------------------------------------------

23 Dec 2016 - v3.9.7.6140

  • Export Files by Type script - Fixed trailing '\' path delimiter error.
  • File Carve driver updates - Improved .ZIP(64), thumbs, .woff, .mov and others.
  • Investigator Notes - Text file updated with investigator and device information.
  • Load Layout - Fixed load case error when custom column layout specified in Options menu.
  • Scripts - Modified scripts are now backed up on new install to 'script-name.pas.001.bak'
  • Scripts - Updated Investigator Notes script.'
  • Reports - Fixed out of resources error when clicking between report sections.'
  • Triage Report - Device and Partition Information updated with Partition Volume ID.
  • Wibu Codemeter activation software update.

--------------------------------------------------

24 Nov 2016 - v3.9.7.6040

  • Live Boot - Additional Windows 10 password bypass routines.
  • Live Boot - Default maximum RAM to 4GB.
  • File System - Fixed error in Date Filter tool.
  • Reports - Fixed error in displaying email attachments.
  • Scripts - Added Investigator Notes script (access from File System > Tools button).
  • Scripts - Fixed path error in Export Files by Type script.
  • Scripts - Script windows now open on active monitor.
  • Language translation updates.

--------------------------------------------------

16 Nov 2016 - v3.9.4.6004

  • Live Boot - Additional logging.
  • NTFS - Improved speed of reading MFT.
  • Activation - Fixed error with Codemeter Network dongle activation.
  • Language translation updates.

--------------------------------------------------

8 Nov 2016 - v3.8.8.5968

  • Added SECURITY and URSCLASS.DAT files to Registry filters.
  • Restricted unauthorized filename characters when renaming evidence.
  • Language translation updates.

--------------------------------------------------

3 Nov 2016 - v3.8.8.5950

  • Language translation updates (Chinese, German, Spanish, Indonesian).
  • Minor GUI updates.
  • Fixed error with some script.pas files duplicating on install.

--------------------------------------------------

29 Oct 2016 - v3.8.8.5896

  • Added VirtualBox Live Boot deploy script to Live Boot button.
  • Improved expand compound files.
  • Improved extract key frame thumbnails.
  • Updated MOV file carve driver.
  • Updated language translations.
  • Other minor updates.

--------------------------------------------------

15 Oct 2016 - v3.8.8.5818

  • Added Live Boot deploy script to File System tools button.
  • Improved export of large MAC files with multiple extents.
  • Other minor updates.

--------------------------------------------------

12 Oct 2016 - v3.6.8.5794

  • Fixed error loading cases with NUIX MSF01 image files.
  • Other minor updates.

--------------------------------------------------

22 Sept 2016 - v3.6.8.5776

  • Fixed incorrect case date when saving a preview.
  • Improved I.P. address recognition in remote servlet.

--------------------------------------------------

20 Sept 2016 - v3.6.8.5764

  • Folder Carve name changed to "Recovered Folders".
  • MKV added to video thumbnail extraction.
  • Fixed issue scanning SAM registry in Shadow Copy files.
  • Improved copy and paste from HEX and TEXT data views.
  • Other Minor GUI updates.

--------------------------------------------------

15 Sept 2016 - v3.6.8.5752

  • Minor GUI updates.

--------------------------------------------------

12 Sept 2016 - v3.6.8.5742

  • Metadata - Fixed issue extracting DOCX metadata.

--------------------------------------------------

9 Sept 2016 - v3.6.8.5740

  • Scripts - Remove redundant scripts on install.
  • Index Search - Export word list now defaults to a clean csv with no formatting.
  • Skin Tone - Fixed corrupt image error occasional causing skin tone freeze.
  • HEX - Added right click width options. Additional navigation improvements.
  • TEXT - Improved navigation in Text data views.

--------------------------------------------------

2 Sept 2016 - v3.6.8.5718

  • Improved handling of corrupt files in Expand Compound Files.
  • Fixed error when clicking between hash sets in the open dialogue.

--------------------------------------------------

1 Sept 2016 - v3.6.8.5706

  • Improved handling of corrupt thumb-cache files.
  • Other minor updates.

--------------------------------------------------

30 August 2016 - v3.6.8.5700

  • HEX - Improved highlighting and navigating in HEX views.
  • Registry - Fixed error sending SAM.LOG files to Registry module.
  • Registry - Added Select All option to Parse Multi Keys script.
  • Reports - Fixed error where some linked report files were not being exported.
  • Triage - File System triage now runs in threaded mode.
  • Fixed error closing case.

--------------------------------------------------

26 August 2016 - v3.6.8.5692

  • Registry - Improved handling of corrupt registry files in Triage.

--------------------------------------------------

24 August 2016 - v3.6.8.5686

  • Live Boot - Improved detection of target operating system version.
  • Skin Tone - Improved speed of skin tone detection.
    - Added video key frame skin tone detection script.
    - Added sample key frame skin tone report.
    - Improved key frame drop down filter speed.
  • Added Camtasia recorder to Windows shortcuts.
  • Gallery View - Improved thumbnail caching speed.
  • Fixed issue closing module data stores on close and open of case.
  • Index Search - Fixed utf8 error exporting word list.
  • Other minor fixes and improvements.

--------------------------------------------------

16 August 2016 - v3.6.2.5646

  • Bookmarks module - Fixed slow Gallery View.

--------------------------------------------------

11 August 2016 - v3.6.2.5643

  • Fixed error in Add Image dialogue box.
  • Index Search - Added additional logging to Index Search completion.

--------------------------------------------------

9 August 2016 - v3.6.2.5632

  • Fixed OLE error in Expand Compound Files causing memory spike.
  • Gallery View - Improved top down caching of gallery thumbnails.

--------------------------------------------------

5 August 2016 - v3.6.2.5618

  • File System - Skin Tone Analysis is significantly faster.
  • File System - "Export Files by Type" has option to rename photos by date taken.
  • About Window - Fixed error reporting the number of cores/RAM in high end systems.

--------------------------------------------------

2 August 2016 - v3.6.2.5612

  • File System - Added Triage button and scripts.
  • File System - Improved Export File Types script.
  • Other minor fixes and improvements.

--------------------------------------------------

25 July 2016 - v3.6.2.5582

  • Activation - Wibu Codemeter update.
  • Case Folders - Now use compression.
  • Index Search - Fixed issue displaying Unicode characters.
  • Index Search - Updated DTSearch 64bit indexing engine (v7.84.8395.1).
  • Keyword Search - fixed error in display view not jumping to first highlighted keyword hit.
  • Triage
    - Registry files are no longer automatically sent to Registry module.
    - Updated Windows User Account and USB devices scripts.
    - Updated Triage reports.
  • Fixed error displaying EXT2/3/4 created times.
  • Translation updates.
  • CMD line AD1 to L01 Fornesic Image Converter
  • Numerous other improvements.

--------------------------------------------------

31 May 2016 - v3.5.7.5418

  • Improved writing of L01 files.

--------------------------------------------------

27 May 2016 - v3.5.7.5408

  • Fixed date in expanded Zip file.
  • Improved speed for images over 3TB.
  • Added custom Evidence Processor profiles.

--------------------------------------------------

26 May 2016 - v3.5.7.5400

  • Network Serve-let update for 64bit.
  • WMV added to video key-frame extraction.
  • Cellebrite UFD added as a supported image type.
  • Segmented ZIP added as a supported image type.
  • Improved speed of processing large ZIP files.
  • Verify Hash button moved to Evidence module.
  • Save to default added in Evidence Processor window.
  • Other fixes and stability enhancements.

--------------------------------------------------

28 Apr 2016 - v3.5.7.5330

  • Improved speed of right-click remove data from modules (e.g. a registry file from the Registry module).

--------------------------------------------------

26 Apr 2016 - v3.5.7.5328

  • Fixed issue where playing of WMA file in display view was causing FEX to halt.
  • Improved column management.
  • Other minor enhancements.

--------------------------------------------------

13 Apr 2016 - v3.5.7.5298

  • Keyword Search - Added expand, contract and file signature right click menu options.
  • Keyword Search - Improved visible file count in middle info. bar.
  • Auto Backup - Now creates a '~' temp file prior to rename on a successful backup.
  • Moved social media chat scripts from "Phone" to "Apps" script folder.
  • Other minor enhancements.

--------------------------------------------------

8 Apr 2016 - v3.5.7.5286

  • Email - Improved export of email messages and attachments.
  • Folder Tree - Removed case folder expansion to increase tree width.
  • Index Search - Fixed UTF 8 issue for special characters.
  • Live Boot - Oracle Virtual Box now supported.
  • Live Boot - Settings now saved to registry.
  • M4a - Fixed issue displaying audio only M4a files.
  • Win 10 Thumbs - Added support for new Windows 10 Thumbs.db format.
  • Win 10 Recycle Bin - Improved renaming of recycle bin files.

--------------------------------------------------

02 Apr 2016 - v3.5.7.5246

  • Email - Improved export of emails and attachments. Fixed missing 'To'.
  • Email - Added extension only filter.
  • Live Boot - Improved recognition of 64bit systems during boot process.
  • File Type - Moved 3GPP from Multimedia to Video group.
  • Other minor fixes and improvements.

--------------------------------------------------

29 Mar 2016 - v3.5.7.5236

  • Fixed intermittent error on close of case.
  • Email - added unread and unsent columns.
  • Email - Updated the unread emails filter.

--------------------------------------------------

24 Mar 2016 - v3.5.7.5224

  • Added originating module name to detached data views.
  • Email - Can now export email attachments embedded within MSG files.
  • Email - Improved handling of email metadata.
  • Email - Added sample email reports including body text.
  • File System - Added the "Info" data view to detail individual file properties.
  • File System - Moved verify hash button.
  • File Type Count script added.
  • Gallery View - Can now be filtered and sorted using the File List.
  • Gallery View - Fixed GDI error.
  • Global open folders button added. Toolbar buttons removed from modules.
  • Keyword Search - Added email columns.
  • Live Boot - Virtual Box support added. (EFI partitions currently not supported).
  • Reports - Added \Cases\Reports folder. Set as default report export folder.

--------------------------------------------------

15 Mar 2016 - v3.5.7.5192

  • File System - Fixed error when displaying WMA files in Display view.
  • Reports - Added email body field.
  • Registry - Fixed 64bit error returning invalid date.
  • Other minor fixes.

--------------------------------------------------

9 March 2016 - v3.5.7.5178

  • Column close error fixed.
  • Improved Export Files script speed.
  • Translation updates for non-English versions.
  • Numerous small fixes and improvements.

--------------------------------------------------

1 March 2016 - v3.5.7.5148

  • 64bit now available on main download page.
  • Replaced toolbar user guide buttons with global help icon.
  • Added global save icon.
  • About Window - more detailed information on available resources of the host computer.
  • Email module - Added To, From, Received fields to the Display view.
  • Email module - Added Metadata data view (for attachments).
  • Email module - Stopped non supported file formats from being passed into Email module.
  • Keyword Search - Added Metadata data view.
  • Live Boot - Create a deploy able Live Boot (see manual Chapt. 27.8).
  • Removed redundant scripts from non-English versions.
  • Registry module - Stopped non supported file formats from being passed into Registry module.
  • Reports - For speed purposes a Preview is limited to 100 records with option to generate full report.
  • Updated Export Files by Extension script to give the option for signature analysis.

--------------------------------------------------

25 February 2016 - v3.5.7.5098

  • Index Search - Fixed error in non-English versions stopping Index Search.

--------------------------------------------------

24 February 2016 - v3.5.7.5094

  • Index Search:
    - Improved noise words.
    - Fixed error indexing CSV file in compressed Zip.
    - Fixed path issue so it is possible to move an index with a case.
    - Multi-threaded to improve index speed by 40%.
  • Progress log now accessible from progress bar after task completion.
  • Open Case default to the last investigator name.
  • Updated Export Files by Extension script to enable grouping by file extension and device.
  • Other minor updates.
  • Translation updates.

--------------------------------------------------

12 February 2016 - 3.4.6.5038

  • Removed redundant column names.
  • Improved memory optimization in 64bit beta.
  • Reports - fixed issue deleting reports.
  • Other minor updates.

--------------------------------------------------

5 February 2016 - 3.4.6.5022

  • 64bit beta available.
  • File System - Fixed error in multi column sort.
  • File System - Added Created Date to categories view.
  • Keywords - Keyword hits now show parent file properties. Allows for flat file export of hits.
  • Reports - Restructured sample report folder. Added additional sample reports.
  • Reports - Added default alphabetical sort for report tables.
  • Reports - Simplified nested tables by adding folder levels "My Bookmarks\*\*".
  • Reports - Added filter option of nested report tables.
  • Other minor fixes and enhancements.

--------------------------------------------------

2 February 2016 - 3.4.6.4998

  • Gallery View - Fixed error when vertical scrolling.
  • Registry - Fixed error passing Windows XP Home registry files.
  • Registry - Fixed error in 64bit beta running Triage report after close and open of case.
  • Reports - Fixed error in copy and paste of report fields.
  • Other small fixes and enhancements.

--------------------------------------------------

22 January 2016 - 3.4.6.4970

  • Keywords - Update to default keywords lists.

--------------------------------------------------

18 January 2016 - 3.4.6.4962

  • Keywords - Updated keywords lists. Added child protection, drugs, terrorism.
  • Column Filters - Column filters are now persistent and do not reset upon the execution of an action.
  • Scripts - Removed Excel charting scripts not compatible with 64bit.
  • Scripts - Updated GPS scripts for 64bit.
  • Numerous other small fixes and updates.

--------------------------------------------------

21 December 2015 - 3.2.4.4876

  • Bookmarks - Improved export options for bookmarked files.

--------------------------------------------------

15 December 2015 - 3.2.4.4850

  • Cache - fixed issue with corrupt icon files slowing cache.
  • Evidence Processor - No longer default to bookmark metadata.
  • L01 - Improved reading of large L01 files.
  • Registry - files sent to Registry module now show in groups.
  • Save/Load - fixed a Save/Load issue for old cases.
  • Save/Load - fixed issue caused by residual bookmarks from removed evidence.
  • Startup - fixed issue on Windows 10 writing startup log file.
  • Translations - Updated language translations.

--------------------------------------------------

4 December 2015 - 3.2.4.4820

  • DMG - improved reading of large DMG images.
  • Filters - fixed error in drop down filter menu.
  • Hashing - fixed issue hashing files in fragmented MFTs.
  • VCard - Improved import of investigator details via vcard.

--------------------------------------------------

1 December 2015 - 3.2.4.4806

  • Auto-backup - set default backups to 15.
  • Auto-backup - improved progress information.
  • Caching - improved caching of thumbnails. Fixed conflict with auto-save.
  • Case Open/Save - now done in threaded mode for improved performance.
  • Disk View - fixed issue using additional RAM.
  • Expand Compound Files - improved speed and stability.
  • File System module - improve speed of loading data.
  • Gallery View - fixed error with off-screen images using memory.
  • Keywords - added IBAN and BBAN regex keywords.
  • OLE file - minor improvement to display OLE compound files.
  • Video thumbnail - improved video thumbnail extraction speed.

--------------------------------------------------

13 November 2015 - 3.2.4.4750

  • Auto-backup - improved backup time sequencing.
  • DD - improvement for multi-segmented DD images using txt load file.
  • Display view - update for improved file viewing.
  • DMG - fix for large DMG files.
  • Export Files - fixed error exporting 0byte files.
  • Expand Compound Files - improved speed of adding expanded files to a case.
  • File Extent view - updated display of run lists.
  • GUI - minor improvements.
  • Live Boot - additional support for Ophcrack password breaking.
  • L01 creation - improved handling of compressed Windows files.
  • NUIX - support for updated file format.
  • Phone script updates.
  • Text Typing tool - Improved responsiveness.

--------------------------------------------------

27 October 2015 - 3.2.4.4648

  • Expanded files are now shown in purple.
  • Install path reads the registry.
  • Word wrap added to add-bookmark and bookmark-edit screens.
  • Email filter for read emails.
  • Fix hashset db3 filter AV on filtered column.
  • Email module filter for unread emails.
  • Servlet now has the option to run as a service.
  • Keyword module, drag and drop of keywords between modules fixed.

--------------------------------------------------

07 October 2015 - 3.1.2.4492

  • Evidence and Bookmarks module toolbar added.
  • Reports module Hyper-link option added.
  • Reports module improved PDF export.
  • Save and load of case multi-threaded.
  • Live Boot additional logging added.
  • Auto-save added to Options window.
  • iPhone and iTunes backup script updates.
  • Gallery view Open With menu item added.
  • File Signature determination added to File System module right click menu.
  • Fixed issue where bin files were causing in install error message.
  • Fixed Index module error on FEX exit.

--------------------------------------------------

18 August 2015 - 3.1.2.4346

  • Fixed a load case error when looking for a non existent column.

--------------------------------------------------

14 August 2015 - 3.1.2.4338

  • L01 file name error message improved.
  • Live Boot option to minimize pending updates.
  • Live Boot added ability to install VMWare tools for systems with no CD.
  • iTunes backup bookmarking scripts updated.
  • Updated user manual.

--------------------------------------------------

7 August 2015 - 3.1.2.4318

  • Solved error indexing in Email module.

--------------------------------------------------

4 August 2015 - 3.1.2.4310

  • Solved intermittent error on close of case.

--------------------------------------------------

23 July 2015 - 3.1.2.4304

  • EX01 issue fixed for files created by Falcon imager.
  • Add Keyword window now defaults to search expression when CTRL/N is pressed for new keyword.
  • File System module Checked count updated to include file size.
  • File Signature inactive button in Evidence Processor fixed.
  • Other minor GUI updates.

--------------------------------------------------

16 July 2015 - 3.1.2.4286

  • Export to CSV or TAB improved.
  • File System list information bar updated with highlighted and size counts.
  • Keyword search updated. Multi-core search with one progress bar.
  • iTunes backup analysis scripts updated.
  • Phone Apps. module for processing of iPhone SQLite chat apps updated.
  • Video thumbnail script updated.

--------------------------------------------------

21 June 2015 - 3.1.2.4240

  • Minor GUI updates.
  • Updated shadow copy detection so that user created shadow copy names are included.

--------------------------------------------------

17 June 2015 - 3.1.2.4228

  • Update of Gallery View Thumbnail caching engine.
  • Multiple minor GUI updates.
  • Duplicate Index column added to enable an unique MD5 data set to be filtered.
  • Duplicate folders filters updated.
  • List view pop-up display to show obscured column content.
  • Event Log Viewer added to Windows Program shortcuts.

--------------------------------------------------

1 June 2015 - 3.1.2.4208

  • Multiple GUI updates.
  • Fixed issue with blank file carve folder at top of folder tree.
  • Reports auto-numbering improved.
  • Wave files now in Category view as Wav not RIFF.
  • DOS Mask (* and ?) added to Text Typing column filter.
  • Duplicate column replaced with Duplicate Count column.
  • MIPv6 disk driver update (43) to solve Live Boot conflicts with security software. Re-download MIPv6 Release Candidate at www.mountimage.com. Ensure that the Disk Driver in the bottom status bar is v(43).

--------------------------------------------------

27 May 2015 - 3.1.2.4186

  • Start screen layout added to Options menu.
  • Triage report now available for 3 devices.
  • Fixed issue with blank file carve folder at top of folder tree.
  • Reports auto-numbering improved.
  • Wave files now in Category view as Wav not RIFF.
  • DOS Mask (* and ?) added to Text Typing filter

Access the latest FEX beta

Get Mount Image Pro v6