Added support for ZIP files using non-DEFLATE methods (e.g.Fixed bugs with indexing of archives (zip, tar, 7z, etc.) in Forensics Mode.Performance is approximately 5x faster on photographic images. Improved JPG, PNG image indexing speed with new methods of calling exiftool.This resulted from better caching, better parsing of the MFT and new low overhead methods of getting file attributes. Approximate 5x faster Forensics Mode indexing.Allows more documents to be indexed in a single index. 12x increased unique words capacity (from 16 million base words to 200 million).When parsing DBX e-mail files in forensics mode, a temporary copy of the file is no longer created.Added WAIT icon to drive refresh, so user can see when refresh is complete.This gives a more accurate list of modified files. When comparing file attributes, mask out the extra attributes used by OSForensics Forensics mode (eg.Caused a 20x slowdown reading compressed files. Fixed performance bug when hashing NTFS compressed files.Fixed wrong directory path being displayed especially when hashing large files.This improves the speed when creating a signature.

E-mail files are no longer saved as temporary files when creating a hash of the file.The main focus of this release is speed improvements, indexing capacity improvements and supporting additional file types during the indexing process.Ĭompared to the current V3.2 release here are list of the changes in V3.3. We are pleased to announce the release of OSForensics V3.3 beta 3, 20/Jan/2016. You can find the V3.3 OSForensics release here.

Process monitor v3.2 find crash