v10.2.2

Changes:

• cf641b7 Merge branch 'main' into release/10.2.x
• 0799c04 changelog: update to 10.2.2
• 61210b5 tools: ci: test: Expand-OrcArchive: optimize for multiple run
• a1c1f7b tools: ci: test: Get-OrcOutcome: add warning for missing exit_status
• 0d537aa OrcCommand: NTFSInfo: write to volstats.csv the output files
• 586db90 OrcCommand: FastFind: fix xml output style
• e7b8eb9 OrcCommand: WolfLauncher: allow user to specify ORC_Offline's keys
• 9eeaf1a OrcCommand: WolfLauncher: remove working directory if it was created
• e5abed2 OrcLib: OutputSpec: add static method Resolve
• c84289d OrcLib: ObjectDirectory: fix displayed type value always set to 'Type'

See More

• ad7b8ef OrcLib: PEInfo: SetFirstBytes: grab also bytes when <BYTES_IN_FIRSTBYTES
• 7e89fdc OrcLib: FileInfo: SetFirstBytes: fix zero padding to BYTES_IN_FIRSTBYTES
• a42ee8b OrcLib: YaraScanner: fix Yara's callbacks file boundary
• 2404946 vcpkg: update yara to 4.3.2
• 4c0db0f Merge branch 'main' into release/10.2.x
• 5d0905f changelog: update to 10.2.1
• e179c92 OrcCommand: add log message on missing 'Location' resolution
• db8da0d OrcLib: LocationSet: cli overrides any previously set parsed location
• 4fcc729 OrcLib: Configuration: make xml 'Location' optional
• ad59c0f OrcLib: OrcLimits: fix limit handling when set to UINT_MAX
• 8ec0204 OrcLib: Location: Shadow: fix missing volume name initialization
• 1469f75 OrcLib: Location: use parent volume identifier for snapshot's
• abf3951 OrcLib: LocationSet: accept wildcard as exclude path
• 4a8f093 OrcCommand: USNJournal: fix location resolution
• ddb14c0 OrcLib: USNJournalWalkerOffline: do not 'resurrect' records
• 3f1dd57 OrcCommand: Log: UtilitiesLoggerConfiguration: fix log file option
• 1007c2e OrcCommand: GetThis: fix resurrectRecord option
• f08b53c OrcLib: FileFind: add overload FileFind::Find expecting Location
• 73a6e77 OrcLib: FileFind: fix missleading log
• a214658 changelog: update to 10.2.0
• 4ae6773 OrcLib: Log: SpdlogLogger: fix possible build issue with fmt
• c863454 OrcLib: Utils: TypeTraits: fix possible build issue with underlying_char_type
• bad6952 Orc: relocate binary if executed from network path
• cc2aaff vcpkg: update to 2023.04.15
• 39addb9 Update .gitignore
• c07d009 OrcLib: Location: order found vss from the most recent to the oldest
• 635d0fe OrcLib: LocationSet: keep the discovering volume order
• 4ed2bbd OrcLib: CommandExecute: release completion callbacks once done
• a0be15a OrcLib: Robustness: UnhandledExceptionFilter: add optional MiniDumpWriteDump
• d842b7a OrcLib: CopyFileAgent: fix possible double separator in output path
• 617556f OrcLib: SystemIdentity: Write: continue to add information on error
• b25d12e OrcCommand: NTFSUtil: new vss parser integration
• 7cb991b OrcLib: MftWalker: add support for ResurrectRecordMode::kResident
• f6d448c Use ResurrectRecordMode instead of boolean
• cdd37d6 OrcLib: add ResurrectRecordMode
• 3f061d1 OrcCommand: GetThis: add options '/ResurrectRecords', 'resurrect'
• 2612e35 OrcCommand: FastFind: add options '/ResurrectRecords', 'resurrect'
• 14caf6d OrcCommand: GetThis: add column 'RecordInUse'
• d46480e Merge branch 'jean/dev' into fabienfl/vss
• 63fb635 OrcLib: Buffer: avoid throwing exception with 0 Elts buffers
• 7376770 OrcLib: ParameterCheck: add support for hex string prepend with '0x'
• 7481a05 OrcLib: Add WriteNamedFileTime overload
• fd373c2 OrcLib: TemporaryStream: add method Clone
• 70bb57a OrcLib: MemoryStream: fix method Duplicate
• ffb081d OrcLib: Utils: Result: get closer to std::expected
• 1de7834 OrcLib: Text: in_addr: use dynamic function resolution
• 0321efc OrcLib: move ToGuid, ToString into directory Text
• 41c753d OrcLib: Text: Fmt: add in_addr
• 135db77 Add support for msvc v143 and cpp23
• b1f36fe README: display CI status for 10.1 and 10.2 and update build instructions
• 74c3452 OrcCommand: NTFSUtil: set default error level to 'error'
• 13fe525 OrcCommand: NTFSInfo: add column 'ShadowCopyId' to volstats.csv
• 05d593a OrcCommand: NTFSInfo: add option "shadows_parser"
• f102d3a OrcCommand: UtilitiesMain: rename method ParseShadowOption
• 181dfd8 OrcCommand: UtilitiesMain: make 'Option' functions static
• 31c8891 OrcLib: Ntfs: Compression: Wof: use Parse pattern
• c3757de OrcLib: VolumeReader: add virtual method Position
• e737c99 OrcLib: Location: add fallback system for microsoft vss enumeration
• 9f9ccea OrcLib: internal shadow copy parser integration
• add8805 OrcLib: Ntfs: add ShadowCopy
• 330162f OrcLib: VolumeReader: add Read overload
• 40ead40 OrcLib: Stream: add VolumeReaderStream
• b88a2b0 OrcLib: Stream: add StreamReader
• 9955ab9 OrcLib: Stream: add StreamUtils.h containing generic stream helpers
• a7b0b20 OrcLib: Stream: add Stream
• e1c84d5 OrcLib: Archive: CompressionLevel: refactor
• 8762361 OrcLib: GetThis: use ShrinkContext with UncompressWofStream
• e923518 OrcLib: ByteStream: add ShrinkContext to release memory without closing
• 49dda76 OrcLib: Ntfs: Compression: Wof: increase default chunk size to 16384
• dab7e5a OrcLib: Authenticode: add cache for parsed catalogs
• 3ab0882 OrcLib: MemoryStream: add parameter to ctor for initial allocation
• bd90b78 Merge branch 'fabienfl/vss_jean_buffers' into fabienfl/vss
• 69a5c5e OrcLib: ExtensionLibrary: add helper ExtensionInScope
• a857520 OrcLib: Buffer: fix index check in zero()
• 682e5e9 OrcLib: TemporaryStream: do not allocate memory if memory threshold is 0
• fa52069 OrcLib: SetPrivilege: constify input argument
• b1a3d10 OrcLib: NtDllExtension: add NtSystemDebugControl
• 061a7b2 OrcLib: Utils: Results: add NtError() to create error_code from NTSTATUS
• 3896a8d OrcCommand: UtilitiesMain: refactor OptionalParameterOption
• ca6668d OrcCommand: UtilitiesMain: add FlagOption to activate options as flags
• 9a32efa OrcLib: StructuredOutput: add FILETIME support
• 4825870 OrcLib: StructuredOutput: add RAII helpers to handle begin/end elements
• 15aac44 OrcLib: LocationSet: add missing include
• c506a50 Improve multiple logs
• 3e7f618 OrcLib: Text: Tree: refactor indent array initialisation
• fbace92 OrcLib: Log: remove assert on empty logger
• e02aadd OrcLib: WofAlgorithm: add ToWString
• bafeda0 OrcLib: Archive: Compression: add ToWString
• 3c3f229 OrcLib: DriverMgmt: improve driver unload
• 7128953 OrcLib: OrcException: add explicit contructors
• 466a30f OrcCommand: UtilitiesMain: add EnumOption
• 0435d20 OrcLib: Text: Fmt: Result: inherit string_view for alignment support
• 29d01e1 vcpkg: update to 2022.11.14
• ef25f46 OrcLib: Text: Fmt: Result: prefer stack allocations
• 8bbdeb2 vcpkg: enable /guard:cf for triplets
• 49b3b91 OrcLib: ByteStream: add call counter to read method
• 389867b OrcLib: DiskExtent: fix GetSeekOffset
• ae87949 OrcLib: CompleteVolumeReader: add Read implementation with CBinaryBuffer
• 7f128bd OrcLib: FindFind: add Yara cache on last item
• 10b641a OrcLib: PEInfo: fix log messages
• 6953d11 OrcLib: Authenticode: fix log messages
• ae7dfbb OrcLib: Text: Print: AttributeListEntry: fix missing eol
• 09f1a31 OrcLib: Text: Print: MFTRecord: add PrintAttributeList
• 61e06f1 OrcLib: rename Utf8ToUtf16, Utf16ToUtf8 to ToUtf8, ToUtf16
• 8862354 OrcLib: Text: Fmt: fix fmt specializations
• 253dd4b OrcLib: Utils: remove AllocationPolicy.h
• eeedf8b OrcLib: Utils: rename AnyPtr to MetaPtr
• 38ea7ac OrcLib: Utils: String: add function Join
• 048747e OrcLib: Utils: add function Dump
• 41b8197 OrcLib: Utils: BufferView: add ToStringView conversion overloads
• c6e5b8b OrcLib: Utils: BufferView: add ToBufferView conversion overloads
• f393ad6 OrcLib: Utils: Guid: add ToString overloads
• 35c1169 OrcLib: Utils: Guid: fix ToString
• c8268fc OrcLib: Ntfs: WofAlgorithm: fix ToString namespace
• 3292102 OrcLib: Text: Encoding: add ToString/ToWString
• f4e5171 OrcLib: Text: Hex: add ToHexString
• e45e36a OrcCommand: WolfLauncher: add critical log on exceeded configured limit
• 5d5c710 OrcCommand: WolfLauncher: syslog any upload error with the Journal
• 426faf2 OrcCommand: WolfLauncher: Journal: add optional error level
• 8bf9d3d OrcLib: Log: rename facility journal to syslog
• e12361b tools: rcedit: display binary path on error when adding resources
• 81c463d tools: ci: test: fix bad character encoding
• 2c04026 tools: ci: test: Invoke-OrcVM: option -upload not mandatory
• f220b7d tools: ci: test: add verbose messages
• a0906b5 tools: ci: test: Test-OrcResults: fix missing return value on error
• ceb6f46 tools: ci: test: fix missing Int32 conversion for exit code
• 1008e88 tools: ci: build: add option -SystemVersion (bind CMAKE_SYSTEM_VERSION)

This list of changes was auto generated.