Skip to content

DFIRoscope Live 0.4.0

Latest
Latest

Choose a tag to compare

View all tags
@cybernista cybernista released this 15 Oct 09:52
· 2 commits to main since this release
v0.4.0
21b7b76

DFIRoscope Live 0.4.0

Highlights

  • Investigate recorded endpoint activity in the Network workspace and pivot to related processes.
  • Review Persistence Current and Changes views with baseline periods and configuration history.
  • See results from explicit Agent live Prefetch analysis in the Artifacts workspace.
  • Compare expected and actual application information using captured process and signature evidence.
  • Configure your own AI provider for chats and investigations with checked evidence links. Cloud requests require your explicit consent.

Fixes in this build

  • Services and drivers stay visible when a registration is malformed or unreadable. The incomplete entry and diagnostic remain available without a false removal.
  • Test connection can test a newly entered AI provider key before you save it.
  • At startup, the Viewer can offer to remove Zone.Identifier download markers from its portable Viewer and Agent binaries. Skip is the default. Removing markers changes how Windows treats file origin; it does not authenticate the files.
  • New AI provider settings use a neutral localhost endpoint. Existing saved settings are preserved.
  • Public build metadata and first-party notices point to the public repository and use neutral project-maintainer attribution.
  • The Events context menu no longer offers AI actions that are not ready in that workspace.

Downloads and verification

  • Self-contained Windows x64 ZIP: includes the .NET runtime.
  • Framework-dependent Windows x64 ZIP: requires the .NET 10 Desktop Runtime.
  • Source ZIP: complete buildable public product source, with provenance.
  • SHA-256 inventory: compare the downloaded ZIP hashes before running a package.

Extract a binary ZIP and run Viewer/DFIRoscope.Live.exe. The local Agent requests administrator privileges when needed. This release is unsigned, so Windows may show an unknown-publisher or reputation warning. Checksums establish file integrity, not publisher authentication.

Configure your own AI provider before using AI features. No provider profiles, credentials, or investigation data are included in the release archives. Bug reports: app@dfiroscope.com.

Assets 7
Loading