Skip to content

Forensics++ v0.8.0

Choose a tag to compare

@github-actions github-actions released this 13 Jul 05:11
· 45 commits to main since this release

Forensics++ v0.8.0

中文

这一版集中整理现有核心工具,不增加工具数量。重点是让常用操作更直接、结果更容易查看,并降低大文件导致浏览器卡顿的概率。

主要修改

  • SQLite 浏览器支持拖动列宽、双击编辑,并明确区分浏览和编辑状态。
  • 图片工作台精简分析结果,保留预览、元数据、通道、结构检查和恢复等实际操作。
  • 邮件、压缩包、文档、流量包和时间戳工具重新整理操作顺序与结果展示。
  • Windows、Registry、Plist、浏览器记录和 EVTX 改为更紧凑的浏览、筛选和详情布局。
  • 删除多个工具中未实际计算的空 SHA-256 和重复字段。
  • 限制容易占用大量内存的文件大小,并优化大结果集筛选。
  • 产品联系邮箱改为 toolab@digiforensics.cn

修复

  • 修复 HTML 邮件预览、MSG 正文解码和无效文件残留旧结果的问题。
  • 修复部分表格溢出、结果选择不一致和展开区域不清晰的问题。
  • 增加流量包解析及通用解析器回归测试。

下载

  • ForensicsPP-v0.8.0-static.zip:构建好的静态版本,解压后打开 index.html
  • SHA256SUMS.txt:静态 ZIP 的校验值。
  • GitHub 同时提供完整源码 ZIP 和 tar.gz。

English

This release focuses on the existing core tools instead of adding more tools. Common actions are more direct, results are easier to inspect, and large files are less likely to stall the browser.

Changed

  • SQLite Browser now supports resizable columns, double-click editing, and a clearer separation between browse and edit modes.
  • Image analysis was reduced to practical preview, metadata, channel, structure, and recovery operations.
  • Email, archive, document, packet capture, and timestamp workflows have clearer action and result order.
  • Windows, Registry, Plist, browser artifact, and EVTX tools now use compact browsing, filtering, and detail layouts.
  • Empty SHA-256 and duplicate fields were removed from several tools.
  • Large-file limits and result filtering were adjusted to reduce browser stalls.
  • The product contact address is now toolab@digiforensics.cn.

Fixed

  • Fixed HTML email preview, MSG body decoding, and stale results after invalid file selection.
  • Fixed several table overflows, inconsistent result selection states, and unclear expandable sections.
  • Added packet-capture and parser regression coverage.

Downloads

  • ForensicsPP-v0.8.0-static.zip: built static version; extract it and open index.html.
  • SHA256SUMS.txt: checksum for the static ZIP.
  • GitHub also provides complete source ZIP and tar.gz archives.