Forensic Evidence 0.3.8

Forensic Evidence 0.3.8 is a signed Windows x64 release.

• Desktop MSI: installs the desktop app, bundled .NET runtime and evidence readers, with a Start menu shortcut and upgrades from earlier MSI versions.
• APFS fix: bundles the isolated APFS reader and fixes APFS navigation in protected builds. No separate Python installation is required. Plain and locked APFS images are checked against the actual release assemblies and helper.
• Read-only exFAT browsing.
• JPEG/PNG carving: scans decoded media, reports allocation where supported, and compares results with existing logical files. The desktop carving UI is disabled by default.
• Shared setting: enable carving by setting "EnableFileCarving": true in %LOCALAPPDATA%\ForensicEvidence\ai-server.json, keeping the file's other settings, then restart the app. Changing AI settings preserves the flag. Saved carved bookmarks remain readable with the feature disabled.
• FAT browsing fix: volume-label entries no longer break directory navigation.

Download desktop-win-x64-signed.msi for installation, desktop-win-x64-signed.zip for a portable desktop app, or mcp-win-x64-signed.zip for the separate MCP server. The MSI installs the desktop app only. For portable use, extract the complete ZIP and run the application inside its FE folder.

The Windows installer and first-party executables are Authenticode signed by BBSOFT LLC through Azure Artifact Signing in GitHub Actions. Signatures and trusted timestamps are verified before publication. MSI installation tables and all 3,962 embedded payload files are checked after signing. Installation, upgrade and uninstall execution have not been tested in a Windows VM. SHA-256 sidecars and SHA256SUMS.txt accompany the downloads; the MSI JSON report and each ZIP's BUILD-INFO.json record validation and source revision.

Windows 10 or later is required. This release publishes Windows x64 packages; other platforms retain their previous releases. APFS support is experimental: locked volumes show a warning, and unlocking, snapshots and deleted-entry recovery are unsupported. Carving recovers structurally valid contiguous JPEG/PNG files and may also find files already present in the filesystem. Allocation classification is unavailable for APFS.

Ollama, AI/OCR model weights and the SigLIP service require separate installation and configuration. Public downloads exclude application source and private protection maps.

Dependency corresponding sources and rebuild materials, including libfsapfs/APFS.