Skip to content

Releases: jschicht/LogFileParser

v2.0.0.51

27 Nov 22:38
Compare
Choose a tag to compare
Improved support for decoding of single index entry updates for $Secure:$SDH and $Secure:$SII.
Improved support for decoding of single index entry updates (both redo and undo) for $Reparse:$R and $ObjId:$O.
Fixed a bug that could cause an app crash with partial security data from $Secure:$SDS.
Fixed a bug that could cause an infinite loop with partial security data from $Secure:$SDS.
Improved error handling in $UsnJrnl records parsing which eliminates some corrupt entries and improves detection of "filling to page boundary" entries.
Improved error handling in $Secure:$SDS handling which eliminates some corrupt entries and leading to more accurate debug logs as well as some minor improvements to accuracy in LogFile.csv.
Fixed incorrect references in lf_TextInformation form LogFile_UndoWipe_INDX_I30.csv to LogFile_INDX_I30.csv.
Minor improvement to filename association.
Improved performance yielding roughly a 20% decrease in processing time.
Improved decoding of DeleteAttribute through better handling of CreateAttribute in the undo operation.
Fixed a small bug in the handling of INDEX_ROOT attributes with type $I30.
Added support for dumping of previous $DATA with DeleteAttribute operations and resident content.

v2.0.0.50

21 May 17:14
Compare
Choose a tag to compare
Performance improvements cutting the processing time in half.
Several minor bugfixes related to the sqlite handling.
Relocated libraries into Lib folder.
Updated sqlite binaries to latest 3.42.
Bugfixes related to UpdateFileName
Updates to reparse tags.
Improvements in the attribute identification and association.
Extended the indx i30 schema to incorporate EaSize.
Various improvements in name association.
Better $I30 handling.

v2.0.0.49

27 Nov 22:07
Compare
Choose a tag to compare
Changed license to MIT.
Fixed GUI bug.
Updated schema for mft to be compatible with latest mft2csv.
Now compiled with current autoit 3.3.16.1.
Verified and included updated sqlite binaries v 3.40.0.0.