Download

Forensic Explorer 64 bit - Full Version (Dongle Required)    New...
11 Dec 2017v4.1.0.6802Download Full Version

Forensic Explorer 64 bit - Evaluation Version (Get 30 Day Key)
11 Dec 2017v4.1.0.6802Download Evaluation Version
Evaluation version does not support case saving, exporting or Live Boot.


Supported languages (select during install): EN  ID  ES  DE  ZH  TR 

» View the change log...

11 Dec 2017 - 4.1.0.6802

  • AFF4 - Image support update.
  • Metadata - Fixed error reading edit time in Microsoft Word.
  • Metadata - Metadata tab for .docx now displays Word metadata (not PK container).
  • Virus Scan - Additional text added to database update window.
  • Virus Scan - Database folder now created on install.
  • Translation updates to DE, ID, ZH.

--------------------------------------------------

5 Dec 2017 - Version 4 - Major Release - v4.1.0.6782

Important:

FEXv3 and FEXv4 have separate installation and My Documents folders so it is possible to have both versions installed on the same computer. It is recommended that when transferring a case from v3 to v4 that you copy the case folder:
..\My Documents\Forensic Explorer\Cases\[Case Name] to the equivalent v4 path, i.e:
..\My Documents\Forensic Explorer v4\Cases\[Case Name]

Anti Virus

  • Added Cisco ClamAV to enable virus scan of case.

Artifacts Module (New)

  • Browser artifacts (browsing history, bookmarks, cookies etc.)
  • Chat artifacts (Kik, Line, MessageMe, Skype, Tinder, Viber, Whatsapp etc.)
  • Mobile artifacts (Call logs, Contacts, Maps, Notes, SMS, Voice Memos, Wifi, etc.)
  • Operating System artifacts (Prefetch, Wifi)
  • Global Regex keyword search of artifact results

Carving

  • Added user Custom Byte Carve
  • Improved carve speed and accuracy of numerous file types
  • Added carve file types, including artifact and browser files

Compound File Expansion

  • Added support for RAR files

Disk View

  • Added GoTo Byte option

Evidence Module

  • Add Folder button
  • Add Remote button
  • Drag and drop support improved for adding images and files

Encryption

  • Bitlocker support added (key required)

Export Data

  • Export data to ZIP file

File Type Support

Added/improved support for signature/carving of file types, including:

  • 7Z
  • CINE
  • Cookies
  • DICOM
  • DynamicDictionary
  • HDPhoto
  • JSON
  • MKV (including video keyframe extraction)
  • OLE (including access to unallocated OLE fragments)
  • PList
  • SQLite
  • UTF16
  • UTF8
  • XML

Gallery View

  • Blur options added to Gallery, Display and Reporting
  • Display of additional file types
  • Hotkey bookmarking to bookmark categories added
  • Thumbnail Cache speed improved
  • Thumbnail now displays bookmarked category number

GUI

  • Auto feedback option added to Forensic Explorer drop down menu
  • Backup icons moved to global toolbar
  • Category Graph updated
  • Explorer Tool - Now continuously records last 100 folders accessed in tree.
  • GUI improvements for improved layout space
  • Keyboard shortcuts improved
  • Processing window can now be fully docked
  • Screen layout options moved to main Forensic Explorer drop down menu
  • Text Typing Filter renamed to Column Filter.
  • Added a custom layout file
  • User details can now be exported to VCF contact file

Hashing

  • Differential, Fuzzy and PhotoDNA Hash options added
  • Search for ‘Almost Identical Files’ (Fuzzy)
  • Search for ‘Visually Similar Graphics’ (Differential)

Image Support

  • AFF4 image file support added

Index Search

  • DTSearch version update

Keywords

  • Adult website keyword lists added

Live Boot

  • Live Boot of MAC computers
  • Support for MAC user account password bypass
  • Improved support for booting write blocked physical drives using FEX and MIP v6.2.0.1774

Project VIC

  • Project VIC model 1.2 and 1.3 support including source file export

Scripts

  • Console log output window update
  • ‘iTunes Identify and Bookmark’ improved to support new iTunes format
  • ‘Folder and File Name Search’ regex search improved
  • Local variable display added (basic)
  • Multi-unit support for scripting

Signature Analysis

  • Custom Signature search added
  • Signature analysis improved for artifact files

Triage

  • Triage speed improved

Other

  • Keyboard shortcuts improved

--------------------------------------------------

1 August 2017 - v3.9.8.6626

  • Categories view - Added Accessed Date category.
  • Distance from Coordinates script updated for African cities.
  • Pornography website keywords - Added groups to import files.
  • Other minor GUI updates.

--------------------------------------------------

23 July 2017 - v3.9.8.6612

  • 32bit version updated to current build.
  • Delete bookmarks issue fixed.
  • Remove Sort in right click menu fixed.
  • Removed Styles from reports causing an intermittent reports error.
  • Other minor GUI updates.

--------------------------------------------------

19 July 2017 - v3.9.8.6598

  • Fixed bug in XML signature analysis.
  • Updated File System > Analysis Programs > Folder and Filename Search.
    * RegEx validation
    * Additional Quick Start RegEx search groups
  • Added Display view double click on .msg attachments to open natively.
  • Fixed overflow error adding a specific FAT32 partition.
  • Open Type Font (OTF) file signature added.
  • Added EnCase8 and Notepad++ to shortcut button.
  • Keyword Search right click option to save code-page selection.

--------------------------------------------------

19 June 2017 - v3.9.8.6558

  • Replaced 'CEM Filename Search' script with 'File System > Analysis Programs > Folder and File Name Search'.
  • Bookmarking - Fixed error with refresh returning deleted bookmarks.

--------------------------------------------------

14 June 2017 - v3.9.8.6546

  • Triage - Improved speed of File System triage.
  • Triage Report - Fixed duplication reporting device details.
  • Other minor fixes and improvements.

--------------------------------------------------

8 June 2017 - v3.9.8.6536

  • Sorting - Improved list sorting speed.
  • Video - Improved video display.

--------------------------------------------------

31 May 2017 - v3.9.8.6522

  • Script - Added Child Endangerment Filename search script (File System > Analysis Programs > CEM Filename Search).
  • ISO - Fixed error reading ISO images.
  • Save and Load - Fix error which could cause corruption of fe.rsv case file.

--------------------------------------------------

22 May 2017 - v3.9.8.6498

  • Email - Bookmark by hash set added to Email module.
  • Reports - Fixed a page thumbnail preview error.
  • Sorting - Improved filename sorting in list views.
  • Other minor GUI updates and fixes.

--------------------------------------------------

5 Apr 2017 - v3.9.8.6414

  • Export Files - Added partition into export file path.
  • Bookmarking - Improved bookmarking speed.
  • Other minor updates.

--------------------------------------------------

23 Mar 2017 - v3.9.8.6390

  • Live Boot - Added capacity to add 7 additional HDDs to a virtual machine.
  • Merged File System > Tools > 'Clear Flags' and 'Clear Hash' into 'Clear Columns'.
  • Added OGG, OGV, RM, FLV to:
    - Skin Tone Analysis – Video Key Frames; and
    - Video – Extract Thumbnail Key Frames.

--------------------------------------------------

21 Mar 2017 - v3.9.8.6376

  • Fixed Entropy Analysis progress bar.
  • Other minor script updates.

--------------------------------------------------

17 Mar 2017 - v3.9.8.6364

  • Carving - Improved UNIMO .umv carving.
  • Google Earth KML - Fixed lat/long error in Turkish and German language.
  • Improved performance reading large drives with large unallocated clusters.

--------------------------------------------------

10 Mar 2017 - v3.9.8.6356

  • Add Device - Fixed error adding device with fragmented MFT attribute record occupying multiple clusters.
  • Auto Save - Changed default auto-save time in options from 20 to 60 minutes.
  • Carving - Added UNIMO Video (.umv) carving.
  • CETS Buttons - Added CETS category 00 to File System module buttons.
  • Gallery View - Improved Hot Key folder selection button in Gallery View.
  • Live Boot - Fixed Live Boot Deploy script for Turkish version.
  • Load Case - Fixed error loading auto-save of case.

--------------------------------------------------

1 Mar 2017 - v3.9.8.6298

  • Bookmarking - Added hot key category bookmarking to Gallery view.
  • Carving - Added Usenet-item file driver for carving of Usenet messages.
  • Copy/paste functions added to File System Record tab and Goto sector popup window.
  • DMG - Added header validation when adding DMG files as evidence.
  • Email Module - Fixed toolbar buttons incorrectly pointing to the File System module.
  • EML - Fixed display view error when viewing EML attachments.
  • LicenseManager is now translated.
  • Logging - Increased speed of writing verbose log files.
  • Fixed thread locking in multi-threaded command tasks.
  • Recycle Bin $I and $R naming update.
  • Thumb-cache - Fixed GDI Object leaks in Gallery View & Thumb-cache.
  • Thumb-cache - Limited to 1000 items in memory for better response time.
  • Translation updates.

--------------------------------------------------

17 Feb 2017 - v3.9.7.6230

  • Bookamrks - Fixed metadata display in Bookmarks module.
  • DMG - Improved support for DMG image files.
  • Hashing - Added Bookmark Files by Hash Match to Hash Match button.
  • Setup - Improved FEX installation file.

--------------------------------------------------

31 Jan 2017 - v3.9.7.6180

  • Hash Match - 'Hash Set' and 'Identified As' columns now handle multiple Hash Set matching.
  • Illicit Image Classification - Added categories 7,8,9 for folder creation script.
  • Illicit Image Classification - Gallery View toolbar classification buttons added (File System > Tools > Gallery View - Bookmark Illicit Images).
  • MOV files - Added support for additional MOV file types (atoms).
  • Text View - Fixed cursor over-run in Text data view.
  • Other minor updates and improvements.

--------------------------------------------------

17 Jan 2017 - v3.9.7.6164

  • Reports - Added RegEx search capability to the Bookmark Enumerator window.

--------------------------------------------------

16 Jan 2017 - v3.9.7.6162

  • Triage - Fixed error triaging a single registry file when 'Add File' used in the Evidence module.
  • Triage - Improved triage of RecentDocs.
  • Other minor updates.

--------------------------------------------------

8 Jan 2017 - v3.9.7.6152

  • Reports - Replaced Edit and Preview tabs with button & right click menu option.
  • Other minor updates.

--------------------------------------------------

23 Dec 2016 - v3.9.7.6140

  • Export Files by Type script - Fixed trailing '\' path delimiter error.
  • File Carve driver updates - Improved .ZIP(64), thumbs, .woff, .mov and others.
  • Investigator Notes - Text file updated with investigator and device information.
  • Load Layout - Fixed load case error when custom column layout specified in Options menu.
  • Scripts - Modified scripts are now backed up on new install to 'script-name.pas.001.bak'
  • Scripts - Updated Investigator Notes script.'
  • Reports - Fixed out of resources error when clicking between report sections.'
  • Triage Report - Device and Partition Information updated with Partition Volume ID.
  • Wibu Codemeter activation software update.

--------------------------------------------------

24 Nov 2016 - v3.9.7.6040

  • Live Boot - Additional Windows 10 password bypass routines.
  • Live Boot - Default maximum RAM to 4GB.
  • File System - Fixed error in Date Filter tool.
  • Reports - Fixed error in displaying email attachments.
  • Scripts - Added Investigator Notes script (access from File System > Tools button).
  • Scripts - Fixed path error in Export Files by Type script.
  • Scripts - Script windows now open on active monitor.
  • Language translation updates.

--------------------------------------------------

16 Nov 2016 - v3.9.4.6004

  • Live Boot - Additional logging.
  • NTFS - Improved speed of reading MFT.
  • Activation - Fixed error with Codemeter Network dongle activation.
  • Language translation updates.

--------------------------------------------------

8 Nov 2016 - v3.8.8.5968

  • Added SECURITY and URSCLASS.DAT files to Registry filters.
  • Restricted unauthorized filename characters when renaming evidence.
  • Language translation updates.

--------------------------------------------------

3 Nov 2016 - v3.8.8.5950

  • Language translation updates (Chinese, German, Spanish, Indonesian).
  • Minor GUI updates.
  • Fixed error with some script.pas files duplicating on install.

--------------------------------------------------

29 Oct 2016 - v3.8.8.5896

  • Added VirtualBox Live Boot deploy script to Live Boot button.
  • Improved expand compound files.
  • Improved extract key frame thumbnails.
  • Updated MOV file carve driver.
  • Updated language translations.
  • Other minor updates.

--------------------------------------------------

15 Oct 2016 - v3.8.8.5818

  • Added Live Boot deploy script to File System tools button.
  • Improved export of large MAC files with multiple extents.
  • Other minor updates.

--------------------------------------------------

12 Oct 2016 - v3.6.8.5794

  • Fixed error loading cases with NUIX MSF01 image files.
  • Other minor updates.

--------------------------------------------------

22 Sept 2016 - v3.6.8.5776

  • Fixed incorrect case date when saving a preview.
  • Improved I.P. address recognition in remote servlet.

--------------------------------------------------

20 Sept 2016 - v3.6.8.5764

  • Folder Carve name changed to "Recovered Folders".
  • MKV added to video thumbnail extraction.
  • Fixed issue scanning SAM registry in Shadow Copy files.
  • Improved copy and paste from HEX and TEXT data views.
  • Other Minor GUI updates.

--------------------------------------------------

15 Sept 2016 - v3.6.8.5752

  • Minor GUI updates.

--------------------------------------------------

12 Sept 2016 - v3.6.8.5742

  • Metadata - Fixed issue extracting DOCX metadata.

--------------------------------------------------

9 Sept 2016 - v3.6.8.5740

  • Scripts - Remove redundant scripts on install.
  • Index Search - Export word list now defaults to a clean csv with no formatting.
  • Skin Tone - Fixed corrupt image error occasional causing skin tone freeze.
  • HEX - Added right click width options. Additional navigation improvements.
  • TEXT - Improved navigation in Text data views.

--------------------------------------------------

2 Sept 2016 - v3.6.8.5718

  • Improved handling of corrupt files in Expand Compound Files.
  • Fixed error when clicking between hash sets in the open dialogue.

--------------------------------------------------

1 Sept 2016 - v3.6.8.5706

  • Improved handling of corrupt thumb-cache files.
  • Other minor updates.

--------------------------------------------------

30 August 2016 - v3.6.8.5700

  • HEX - Improved highlighting and navigating in HEX views.
  • Registry - Fixed error sending SAM.LOG files to Registry module.
  • Registry - Added Select All option to Parse Multi Keys script.
  • Reports - Fixed error where some linked report files were not being exported.
  • Triage - File System triage now runs in threaded mode.
  • Fixed error closing case.

--------------------------------------------------

26 August 2016 - v3.6.8.5692

  • Registry - Improved handling of corrupt registry files in Triage.

--------------------------------------------------

24 August 2016 - v3.6.8.5686

  • Live Boot - Improved detection of target operating system version.
  • Skin Tone - Improved speed of skin tone detection.
    - Added video key frame skin tone detection script.
    - Added sample key frame skin tone report.
    - Improved key frame drop down filter speed.
  • Added Camtasia recorder to Windows shortcuts.
  • Gallery View - Improved thumbnail caching speed.
  • Fixed issue closing module data stores on close and open of case.
  • Index Search - Fixed utf8 error exporting word list.
  • Other minor fixes and improvements.

--------------------------------------------------

16 August 2016 - v3.6.2.5646

  • Bookmarks module - Fixed slow Gallery View.

--------------------------------------------------

11 August 2016 - v3.6.2.5643

  • Fixed error in Add Image dialogue box.
  • Index Search - Added additional logging to Index Search completion.

--------------------------------------------------

9 August 2016 - v3.6.2.5632

  • Fixed OLE error in Expand Compound Files causing memory spike.
  • Gallery View - Improved top down caching of gallery thumbnails.

--------------------------------------------------

5 August 2016 - v3.6.2.5618

  • File System - Skin Tone Analysis is significantly faster.
  • File System - "Export Files by Type" has option to rename photos by date taken.
  • About Window - Fixed error reporting the number of cores/RAM in high end systems.

--------------------------------------------------

2 August 2016 - v3.6.2.5612

  • File System - Added Triage button and scripts.
  • File System - Improved Export File Types script.
  • Other minor fixes and improvements.

--------------------------------------------------

25 July 2016 - v3.6.2.5582

  • Activation - Wibu Codemeter update.
  • Case Folders - Now use compression.
  • Index Search - Fixed issue displaying Unicode characters.
  • Index Search - Updated DTSearch 64bit indexing engine (v7.84.8395.1).
  • Keyword Search - fixed error in display view not jumping to first highlighted keyword hit.
  • Triage
    - Registry files are no longer automatically sent to Registry module.
    - Updated Windows User Account and USB devices scripts.
    - Updated Triage reports.
  • Fixed error displaying EXT2/3/4 created times.
  • Translation updates.
  • CMD line AD1 to L01 Fornesic Image Converter
  • Numerous other improvements.

--------------------------------------------------

31 May 2016 - v3.5.7.5418

  • Improved writing of L01 files.

--------------------------------------------------

27 May 2016 - v3.5.7.5408

  • Fixed date in expanded Zip file.
  • Improved speed for images over 3TB.
  • Added custom Evidence Processor profiles.

--------------------------------------------------

26 May 2016 - v3.5.7.5400

  • Network Serve-let update for 64bit.
  • WMV added to video key-frame extraction.
  • Cellebrite UFD added as a supported image type.
  • Segmented ZIP added as a supported image type.
  • Improved speed of processing large ZIP files.
  • Verify Hash button moved to Evidence module.
  • Save to default added in Evidence Processor window.
  • Other fixes and stability enhancements.

--------------------------------------------------

28 Apr 2016 - v3.5.7.5330

  • Improved speed of right-click remove data from modules (e.g. a registry file from the Registry module).

--------------------------------------------------

26 Apr 2016 - v3.5.7.5328

  • Fixed issue where playing of WMA file in display view was causing FEX to halt.
  • Improved column management.
  • Other minor enhancements.

--------------------------------------------------

13 Apr 2016 - v3.5.7.5298

  • Keyword Search - Added expand, contract and file signature right click menu options.
  • Keyword Search - Improved visible file count in middle info. bar.
  • Auto Backup - Now creates a '~' temp file prior to rename on a successful backup.
  • Moved social media chat scripts from "Phone" to "Apps" script folder.
  • Other minor enhancements.

--------------------------------------------------

8 Apr 2016 - v3.5.7.5286

  • Email - Improved export of email messages and attachments.
  • Folder Tree - Removed case folder expansion to increase tree width.
  • Index Search - Fixed UTF 8 issue for special characters.
  • Live Boot - Oracle Virtual Box now supported.
  • Live Boot - Settings now saved to registry.
  • M4a - Fixed issue displaying audio only M4a files.
  • Win 10 Thumbs - Added support for new Windows 10 Thumbs.db format.
  • Win 10 Recycle Bin - Improved renaming of recycle bin files.

--------------------------------------------------

02 Apr 2016 - v3.5.7.5246

  • Email - Improved export of emails and attachments. Fixed missing 'To'.
  • Email - Added extension only filter.
  • Live Boot - Improved recognition of 64bit systems during boot process.
  • File Type - Moved 3GPP from Multimedia to Video group.
  • Other minor fixes and improvements.

--------------------------------------------------

29 Mar 2016 - v3.5.7.5236

  • Fixed intermittent error on close of case.
  • Email - added unread and unsent columns.
  • Email - Updated the unread emails filter.

--------------------------------------------------

24 Mar 2016 - v3.5.7.5224

  • Added originating module name to detached data views.
  • Email - Can now export email attachments embedded within MSG files.
  • Email - Improved handling of email metadata.
  • Email - Added sample email reports including body text.
  • File System - Added the "Info" data view to detail individual file properties.
  • File System - Moved verify hash button.
  • File Type Count script added.
  • Gallery View - Can now be filtered and sorted using the File List.
  • Gallery View - Fixed GDI error.
  • Global open folders button added. Toolbar buttons removed from modules.
  • Keyword Search - Added email columns.
  • Live Boot - Virtual Box support added. (EFI partitions currently not supported).
  • Reports - Added \Cases\Reports folder. Set as default report export folder.

--------------------------------------------------

15 Mar 2016 - v3.5.7.5192

  • File System - Fixed error when displaying WMA files in Display view.
  • Reports - Added email body field.
  • Registry - Fixed 64bit error returning invalid date.
  • Other minor fixes.

--------------------------------------------------

9 March 2016 - v3.5.7.5178

  • Column close error fixed.
  • Improved Export Files script speed.
  • Translation updates for non-English versions.
  • Numerous small fixes and improvements.

--------------------------------------------------

1 March 2016 - v3.5.7.5148

  • 64bit now available on main download page.
  • Replaced toolbar user guide buttons with global help icon.
  • Added global save icon.
  • About Window - more detailed information on available resources of the host computer.
  • Email module - Added To, From, Received fields to the Display view.
  • Email module - Added Metadata data view (for attachments).
  • Email module - Stopped non supported file formats from being passed into Email module.
  • Keyword Search - Added Metadata data view.
  • Live Boot - Create a deploy able Live Boot (see manual Chapt. 27.8).
  • Removed redundant scripts from non-English versions.
  • Registry module - Stopped non supported file formats from being passed into Registry module.
  • Reports - For speed purposes a Preview is limited to 100 records with option to generate full report.
  • Updated Export Files by Extension script to give the option for signature analysis.

--------------------------------------------------

25 February 2016 - v3.5.7.5098

  • Index Search - Fixed error in non-English versions stopping Index Search.

--------------------------------------------------

24 February 2016 - v3.5.7.5094

  • Index Search:
    - Improved noise words.
    - Fixed error indexing CSV file in compressed Zip.
    - Fixed path issue so it is possible to move an index with a case.
    - Multi-threaded to improve index speed by 40%.
  • Progress log now accessible from progress bar after task completion.
  • Open Case default to the last investigator name.
  • Updated Export Files by Extension script to enable grouping by file extension and device.
  • Other minor updates.
  • Translation updates.

--------------------------------------------------

12 February 2016 - 3.4.6.5038

  • Removed redundant column names.
  • Improved memory optimization in 64bit beta.
  • Reports - fixed issue deleting reports.
  • Other minor updates.

--------------------------------------------------

5 February 2016 - 3.4.6.5022

  • 64bit beta available.
  • File System - Fixed error in multi column sort.
  • File System - Added Created Date to categories view.
  • Keywords - Keyword hits now show parent file properties. Allows for flat file export of hits.
  • Reports - Restructured sample report folder. Added additional sample reports.
  • Reports - Added default alphabetical sort for report tables.
  • Reports - Simplified nested tables by adding folder levels "My Bookmarks\*\*".
  • Reports - Added filter option of nested report tables.
  • Other minor fixes and enhancements.

--------------------------------------------------

2 February 2016 - 3.4.6.4998

  • Gallery View - Fixed error when vertical scrolling.
  • Registry - Fixed error passing Windows XP Home registry files.
  • Registry - Fixed error in 64bit beta running Triage report after close and open of case.
  • Reports - Fixed error in copy and paste of report fields.
  • Other small fixes and enhancements.

--------------------------------------------------

22 January 2016 - 3.4.6.4970

  • Keywords - Update to default keywords lists.

--------------------------------------------------

18 January 2016 - 3.4.6.4962

  • Keywords - Updated keywords lists. Added child protection, drugs, terrorism.
  • Column Filters - Column filters are now persistent and do not reset upon the execution of an action.
  • Scripts - Removed Excel charting scripts not compatible with 64bit.
  • Scripts - Updated GPS scripts for 64bit.
  • Numerous other small fixes and updates.

--------------------------------------------------

21 December 2015 - 3.2.4.4876

  • Bookmarks - Improved export options for bookmarked files.

--------------------------------------------------

15 December 2015 - 3.2.4.4850

  • Cache - fixed issue with corrupt icon files slowing cache.
  • Evidence Processor - No longer default to bookmark metadata.
  • L01 - Improved reading of large L01 files.
  • Registry - files sent to Registry module now show in groups.
  • Save/Load - fixed a Save/Load issue for old cases.
  • Save/Load - fixed issue caused by residual bookmarks from removed evidence.
  • Startup - fixed issue on Windows 10 writing startup log file.
  • Translations - Updated language translations.

--------------------------------------------------

4 December 2015 - 3.2.4.4820

  • DMG - improved reading of large DMG images.
  • Filters - fixed error in drop down filter menu.
  • Hashing - fixed issue hashing files in fragmented MFTs.
  • VCard - Improved import of investigator details via vcard.

--------------------------------------------------

1 December 2015 - 3.2.4.4806

  • Auto-backup - set default backups to 15.
  • Auto-backup - improved progress information.
  • Caching - improved caching of thumbnails. Fixed conflict with auto-save.
  • Case Open/Save - now done in threaded mode for improved performance.
  • Disk View - fixed issue using additional RAM.
  • Expand Compound Files - improved speed and stability.
  • File System module - improve speed of loading data.
  • Gallery View - fixed error with off-screen images using memory.
  • Keywords - added IBAN and BBAN regex keywords.
  • OLE file - minor improvement to display OLE compound files.
  • Video thumbnail - improved video thumbnail extraction speed.

--------------------------------------------------

13 November 2015 - 3.2.4.4750

  • Auto-backup - improved backup time sequencing.
  • DD - improvement for multi-segmented DD images using txt load file.
  • Display view - update for improved file viewing.
  • DMG - fix for large DMG files.
  • Export Files - fixed error exporting 0byte files.
  • Expand Compound Files - improved speed of adding expanded files to a case.
  • File Extent view - updated display of run lists.
  • GUI - minor improvements.
  • Live Boot - additional support for Ophcrack password breaking.
  • L01 creation - improved handling of compressed Windows files.
  • NUIX - support for updated file format.
  • Phone script updates.
  • Text Typing tool - Improved responsiveness.

--------------------------------------------------

27 October 2015 - 3.2.4.4648

  • Expanded files are now shown in purple.
  • Install path reads the registry.
  • Word wrap added to add-bookmark and bookmark-edit screens.
  • Email filter for read emails.
  • Fix hashset db3 filter AV on filtered column.
  • Email module filter for unread emails.
  • Servlet now has the option to run as a service.
  • Keyword module, drag and drop of keywords between modules fixed.

--------------------------------------------------

07 October 2015 - 3.1.2.4492

  • Evidence and Bookmarks module toolbar added.
  • Reports module Hyper-link option added.
  • Reports module improved PDF export.
  • Save and load of case multi-threaded.
  • Live Boot additional logging added.
  • Auto-save added to Options window.
  • iPhone and iTunes backup script updates.
  • Gallery view Open With menu item added.
  • File Signature determination added to File System module right click menu.
  • Fixed issue where bin files were causing in install error message.
  • Fixed Index module error on FEX exit.

--------------------------------------------------

18 August 2015 - 3.1.2.4346

  • Fixed a load case error when looking for a non existent column.

--------------------------------------------------

14 August 2015 - 3.1.2.4338

  • L01 file name error message improved.
  • Live Boot option to minimize pending updates.
  • Live Boot added ability to install VMWare tools for systems with no CD.
  • iTunes backup bookmarking scripts updated.
  • Updated user manual.

--------------------------------------------------

7 August 2015 - 3.1.2.4318

  • Solved error indexing in Email module.

--------------------------------------------------

4 August 2015 - 3.1.2.4310

  • Solved intermittent error on close of case.

--------------------------------------------------

23 July 2015 - 3.1.2.4304

  • EX01 issue fixed for files created by Falcon imager.
  • Add Keyword window now defaults to search expression when CTRL/N is pressed for new keyword.
  • File System module Checked count updated to include file size.
  • File Signature inactive button in Evidence Processor fixed.
  • Other minor GUI updates.

--------------------------------------------------

16 July 2015 - 3.1.2.4286

  • Export to CSV or TAB improved.
  • File System list information bar updated with highlighted and size counts.
  • Keyword search updated. Multi-core search with one progress bar.
  • iTunes backup analysis scripts updated.
  • Phone Apps. module for processing of iPhone SQLite chat apps updated.
  • Video thumbnail script updated.

--------------------------------------------------

21 June 2015 - 3.1.2.4240

  • Minor GUI updates.
  • Updated shadow copy detection so that user created shadow copy names are included.

--------------------------------------------------

17 June 2015 - 3.1.2.4228

  • Update of Gallery View Thumbnail caching engine.
  • Multiple minor GUI updates.
  • Duplicate Index column added to enable an unique MD5 data set to be filtered.
  • Duplicate folders filters updated.
  • List view pop-up display to show obscured column content.
  • Event Log Viewer added to Windows Program shortcuts.

--------------------------------------------------

1 June 2015 - 3.1.2.4208

  • Multiple GUI updates.
  • Fixed issue with blank file carve folder at top of folder tree.
  • Reports auto-numbering improved.
  • Wave files now in Category view as Wav not RIFF.
  • DOS Mask (* and ?) added to Text Typing column filter.
  • Duplicate column replaced with Duplicate Count column.
  • MIPv6 disk driver update (43) to solve Live Boot conflicts with security software. Re-download MIPv6 Release Candidate at www.mountimage.com. Ensure that the Disk Driver in the bottom status bar is v(43).

--------------------------------------------------

27 May 2015 - 3.1.2.4186

  • Start screen layout added to Options menu.
  • Triage report now available for 3 devices.
  • Fixed issue with blank file carve folder at top of folder tree.
  • Reports auto-numbering improved.
  • Wave files now in Category view as Wav not RIFF.
  • DOS Mask (* and ?) added to Text Typing filter

» Other download links

Forensic Explorerv4.1.0.6802 (32bit)
Forensic Explorerv3.9.8.6626 (64bit)
Forensic ExplorerBeta Version
Mount Image Prov6.2.0.1775 (64bit)
VirtualBoxhttps://www.virtualbox.org/