Skip to content

Forensics++ v0.7.0

Choose a tag to compare

@github-actions github-actions released this 12 Jul 16:22
· 47 commits to main since this release

Forensics++ v0.7.0

中文

新增

  • Registry Hive 浏览器:读取 NTUSER.DAT、SOFTWARE、SYSTEM、SAM 和 SECURITY。
  • Plist 浏览器:支持 XML Plist 和二进制 bplist00
  • 邮件工具支持 Outlook MSG,按文件后缀和文件头自动识别 EML / MSG。
  • SQLite 可同时打开数据库、WAL 和 SHM 文件。
  • 设置页显示本站占用、localStorage 占用和浏览器配额。
  • 设置页可查看并关闭当前会话中已经打开的工具。

修改

  • 切换工具时保留已经打开页面的输入和结果。
  • SQLite 表格支持拖动列宽;双击单元格后原位编辑。
  • 编辑模式关闭时,双击单元格会提示先开启编辑模式。
  • 默认主题色改为 #4457A6,并增加更多可选颜色。
  • 使用条款恢复为必须确认的遮罩弹窗。
  • 精简设置页和项目文案。
  • 浏览器持久存储与当前标签页内存分开说明。

修复

  • 修复 GitHub Actions Node.js 22 环境缺少 Promise.try 时 PDF 测试超时的问题。
  • 修复 Ant Design Switch 被全局按钮样式覆盖的问题。
  • 修复部分工具切换后状态丢失的问题。
  • WAL 合并增加文件头与逐帧校验;损坏尾帧不会覆盖最后一次完整提交。
  • MSG 和 Registry Hive 增加格式校验,减少把其他 OLE / REGF 文件误判为有效数据的情况。

下载

  • ForensicsPP-v0.7.0-static.zip:构建好的静态网站。
  • SHA256SUMS.txt:ZIP 校验值。
  • GitHub 自动提供源码 ZIP 和 tar.gz。

English

Added

  • Registry Hive Browser for NTUSER.DAT, SOFTWARE, SYSTEM, SAM, and SECURITY.
  • Plist Browser for XML Plist and binary bplist00 files.
  • Outlook MSG support in the Email tool with automatic EML / MSG detection.
  • SQLite database, WAL, and SHM group loading.
  • Storage usage, localStorage usage, and browser quota in Settings.
  • Settings can list and close tools retained in the current tab.

Changed

  • Open tool pages keep their input and results when switching tools.
  • SQLite columns are resizable and cells can be edited in place with a double-click.
  • Double-clicking a cell while edit mode is off now shows a clear prompt.
  • The default accent color is now #4457A6, with additional color choices.
  • The terms prompt is once again a blocking confirmation dialog.
  • Settings and project copy have been shortened.
  • Persistent browser storage is described separately from current-tab memory.

Fixed

  • Fixed PDF test timeouts on GitHub Actions with Node.js 22 where Promise.try is unavailable.
  • Fixed global button CSS overriding the Ant Design Switch.
  • Fixed tool state being lost after navigating to another tool.
  • WAL merge now verifies header and frame checksums and ignores corrupt tail frames after the last complete commit.
  • MSG and Registry Hive validation now reject unrelated or structurally invalid containers more reliably.

Downloads

  • ForensicsPP-v0.7.0-static.zip: built static website files.
  • SHA256SUMS.txt: checksum for the ZIP file.
  • GitHub also provides source ZIP and tar.gz archives.