Zero length files appear around 5000 times on a typical hard drive. Previously a zero length file would match 500,000 applications in NSRL list.Īdded a limit of 5 file set matches returned for multiple file hash lookups file set results a hash set lookup for a single file will return which improves speed dramatically when hash set or files being looked up contain matches in multiple files sets (eg when searching for file hashes in a set containing millions of records such as NSRL hash sets)Īdded caching of 0 byte / empty (contains only 0's) files to speed up multiple hash set lookups. So 1 file on disk can now not match more than 1000 applications. For large hashsets, with a fast SSD, performance improved 5 fold.Īdded a limit of 1000 file set matches returned for a single file hash lookup. When performing a hash set lookup for multiple files, 4 threads and a larger block sizes for disk reads are now used in order to increase performance. It looks slower, but is actually much much faster. Reduced the frequency of update to the user interface when hash operation is running to improve speed. This allows other modules in OSF to be used simultenously with hashing in background.įixed dialog resizing screen corruption issues in the hashset lookup window Thumbnail View, flags are now custom drawn to increase the speed when updating path flags, for example when doing hash matching.Īdded support for 'Modeless' dialogs for hash lookup for multiple files. PST files with compression.įixed a crash which could occur in the hash set lookup function when the hash set being searched contained very long string lengths. New Zoom indexer build, fixed bug that was failing to index particular. The Edge browser in Win10 unexpectedly broke some of the help functions.įixed a crash in the 32bit version when trying to start a filename search For example file name searches are now 33% faster.įixed up the opening of the Help file to get the navigation menu showing again. Slightly more RAM is used, but disk operations are faster. Resulting in memory leaks and possible crashes.Įven larger cache sizes and more advanced cache lookup algorithm to speed up various operation that involve reading MFT (is a RAM usage / speed trade off). Some handles to various internal resources were not being free. Multiple threads should run significantly faster than before. Solution was to enlarged cache slightly and unified it into a shared cache. Registry access code wasn’t thread safe & could crash if multiple tasks were reading registry entries at same time, especially password recovery.Ĭaching of disk’s MFT into RAM didn’t work well with multiple threads. This saves a small amount of CPU time.Ī bug fix for parsing some rare corrupted PST fliesĬorrection of various multi-threading bugs, which came to light when running a large number of tasks simultaneously. A log file is also now written to the drive recording the preparation steps.Īdded check if SHA256 hash is stored in the hash set. Can wipe, verify, format drive with 1 click. Now has a faster option to switch between the various thumbnail files found on drive via a drop down list.ġ click drive preparation function. Started sanitising the HTML output for some items when exporting to HTML so that HTML special characters (eg &) are safely encoded. Only non-blank fields shall be outputtedįixed a buffer overflow bug due to illegally long filenames in ZIP files This will then be replaced by each item's name when added to the case.įixed sorting by clicking on title in Case Management window.Īdded new tag to customisable reports for generating Case Info table. On the "add to case" dialog when using the "Use same details for all" option if the title has not been changed by the user a special flag will be displayed. Items added to a case can now be categorized into a type of Crime, this list can be customised by editing the "Categories.txt" file in the ProgramData folder. It is possible to lock down the workflow with a password so inexperienced users can’t re-enable all the features so easily. Now also removes icons from the Start page (and the menu) Huge amount of data can now be rapidly collected by inexperienced users with single click.
0 Comments
Leave a Reply. |