DataLifter training now being handled by ECPI


- IACIS
- BKFORENSICS
- CFTCO
- FILESIGS.UK
- NW3C
- CCE Boot Camp
- CyberSec. Inst.
- CTIN.ORG



Version Report and Known issues

Version 1.0.2.114

  1. PENDING - Unable to access "active" or "in use" files such as PageFile.sys. Might throw a File Sharing Violation or Access Violation error.
  2. PENDING - Free Space Logical Disk search does not support Cluster sizes over 32k. Program will skip drive.
  3. PENDING - Hashing extracted files to detect duplicates sometimes incorrectly matches up Hash value to file extracted causing a non-duplicate to be deleted. (option disabled)
  4. PENDING - Mixed format signatures are allowed to be selected and shouldn't. This creates and incompatable file extension.
  5. PENDING - Does not support Encase v5 E01 files.
  6. PENDING - Recovering data from Encase E0n files sometimes hangs application. * Try using only 1 Extraction Thread. See Tools->Options for this setting.
  7. PENDING - Set Extraction windows now supports multiple changes at one time.

Version 1.0.2.110

  1. FIXED - Threads sometimes hang during recovery of ASF or WMF Common signatures.

Version 1.0.2.109

  1. FIXED - When launching FEPRO from any short-cut created by the installer, attempting to start File Signature Builder fails with a message that "fsb.exe" could not be found. Please download from here to get the latest fix.
  2. FIXED - Common Header item labels can no longer be changed.
  3. FIXED - Header 3 was miscalculated when using File Signature Builder. (Build 1.0.2.109)
  4. FIXED - Signature Checksum value extended over 32 bits.
  5. FIXED - Creating a new signature started with 1 byte Minimum and Maximum size. This was changed to a more realistic starting value.
  6. FIXED - Adding a Footer value now automatically calculates the Footer Offset value assuming the Footer is at the end of the last 512 bytes of the signature.

Version 1.0.2.108

  1. ADDED - Artifact Finder, previously known as C-Hash. Now supports Logical Disk Access. [READ MORE...]

Version 1.0.2.107

  1. FIXED - Attempting to adjust Max. Size from the Set Extraction Options window after setting the Max. Size to an upper limit (100MB) in Signature Editor window displays 0 bytes.
  2. FIXED - Setting both Min. and Max. extraction size to to 1k in a Custom signature causes all file hits to be ignored.
  3. CHANGE - New interface for both File Signature Editor and Set Extraction Options window. Both now allow a more refined value for Minimum and Maximum data extraction size.
  4. FIXED - Carving AVI file types sometimes recovers WAV files.
  5. FIXED - Attempting to Exit or Terminate application while carving is active throws an error.
  6. ADDED - An option was added to the Tools->Options window letting you choose to use the original/older output folder structure.
  7. FIXED - After importing new signatures program does not reload them.
  8. FIXED - Selecting Cancel from the Set Extraction Options window has no effect on previous changes.
  9. FIXED - View EXIF button in report window is disabled after viewing report more than once.
  10. FIXED - Clicking View Report button while Building Report is running throws an error.
  11. CHANGE - The Set Extraction Options window now allows Common signature keywords.
  12. FIXED - After starting and exiting File Signature Builder, previously selected Custom Headers changes to the Custom Headers selected at the start of FEPro.

Version 1.0.2.106

  1. FIXED - Elapsed time in TryMe mode incorrectly set at startup.
  2. FIXED - Synchronized version numbers of FEPro and FSB (File Signature Builder)
  3. FIXED - Getting Started form now centers on main FSB form.
  4. FIXED - AccessViolation error from FSB when attempting to edit new signatures.

Version 1.0.2.105

  1. FIXED - IntOverflow error with some Encase® compressed E0 files.
  2. FIXED - AccessViolation when right-click menu on Custom Signatures was accessed after adding new Category from File Signature Editor.
  3. FIXED - EIniFileException attempting to update INI file.

Version 1.0.2.104

  1. FIXED - Selecting Next or Previous in Signature Editor window throws error for International Local.
  2. FIXED - Reconfigured Update.exe which was saving the updated files to the wrong location.
  3. FIXED - Import BAK signature file in case the primary signature list gets corrupted.
  4. FIXED - Hook to Source files not being released after extraction session.
  5. FIXED - Right-click menu on Common Headers tree throws EInvalidGridOperation error if no signatures are selected.

Version 1.0.2.103

  1. CHANGE - Min. extraction size of Common signatures JPG s1-s3 was changed to 25k from 5k. This avoids only pulling Thumbnail images from digital camera pictures.
  2. FIXED - Using EXIF Viewer while extracting data freezes extraction process.
  3. FIXED - Selecting Tools->Set Extraction Options throws EInvalidGridOperation error if no signatures are selected.
  4. FIXED - OpenFile error thrown when trying to access PageFile.Sys on active drive.

Version 1.0.2.102

  1. ADDED - An Update utility can be launched from the Help menu.
  2. ADDED - Ability to enter plain text into Header 1 instead of only formatted hex values.
  3. FIXED - Access Violation Exception when carving TIFF files.

Version 1.0.2.101

  1. FIXED - The Count Only option does not display location of hits.

Version 1.0.2.100

  1. FIXED - Encase files not yet supported
  2. FIXED - Some files extracted using the Logical Drive Sector search may have the last few bytes of the last sector of the file corrupt.

We appreciate your visit and interest in DataLifter Computer Forensic Support Tools. Please take some time to look around. If you have any questions, please don't hesitate to contact us.


DataLifter - File Extractor Pro

 

 

 

File Extractor Pro (FEPro). We think this will be the best "carving" tool you will ever use!
TRY...
BUY...
MORE INFO...


DATALIFTER TRAINING NOW WITH ECPI!
MORE INFO...

 


DataLifter and Forensicware are registered trademarks of StepaNet Communications, Inc.

2904 NW Ashwood Dr. Corvallis, Oregon 97330

Voice 1-888-781-3016
Fax 1-888-781-3016
Support Ext. 1
Sales Ext. 2
All Other Ext. 3

E-mail

 


Home - Purchase - Products - Downloads - Support - Training - Contact Us