...
In this release (Change Log v3.8) we have added some new functionality in terms of source processing and browser support. We have added support for processing data saved in Advanced Forensic Format as well as well as adding the ability to recover Google Chrome cache records. In addition, we have added support for Logicube Dossier E01 images.
- Full change log for version 3.8
- List of supported browsers
- List of supported source types and data formats
Advanced Forensics Format (AFF) Support
The Advanced Forensics Format (AFF) is an extensible open format for the storage of disk images and related forensic metadata. It was developed by Simson Garfinkel and Basis Technology. HstEx (and Blade) now support the processing of AFF image files (as well as other forensic formats). The following page lists the current supported file formats: Forensic Image Formats Supported by HstEx.
Recovery of Deleted Google Chrome Cache Records
HstEx version 3.8 now adds the ability to recover live and deleted Google Chrome Cache records from all source data types. This is a significant addition to the software, as previously, it was only possible to examine live record, which were still available, on a suspect system.
Recovery of Deleted Mozilla Firefox v1 to 10 Cache Records