Repository navigation
UFFS v0.6.1
UFFS v0.6.1
π What's New
See the full changelog
and CHANGELOG.md in the repository for details.
π¦ Downloads
UFFS is a Windows-native NTFS search engine β live indexing of
the Master File Table requires Windows. The engine core is
cross-platform, so macOS and Linux builds are shipped for
offline MFT analysis from captured .mft / .bin snapshots.
Each platform ships as a one-download ZIP bundle in three
tiers β pick the one that matches how much you need:
| Tier | Zip suffix | Contents |
|---|---|---|
| min | -min.zip |
uffs + uffsd + uffs-tui demo. Lean engine for CI/scripting. |
| normal | (no suffix) | min + uffsmcp + uffs-mft + docs + brand + packaging helper. Recommended. |
| full | -full.zip |
normal + the uffs-diag diagnostic tools. |
π₯οΈ Every tier bundles the free
uffs-tuidemo β the
zero-setup front door. After unzipping, just runuffs-tui
to browse your own drives in a UI (the daemon auto-starts).
The demo has capped result counts and disabled exports; see
DEMO-LICENSE.txtin the zip. Full TUI/GUI are commercial.
Individual binaries are also attached for automation that
wgets a single file.
π¦ Windows x86_64 β primary live-indexing target
uffs-windows-x64.zipβ recommended (normal tier): CLI +
daemon + MCP + MFT tooling +uffs-tuidemo + icon + docs.
The.exes ship with the UFFS icon andasInvokermanifest
embedded. Also:uffs-windows-x64-min.zip,
uffs-windows-x64-full.zip.- Raw binaries:
uffs-windows-x64.exe,uffsd-windows-x64.exe,
uffsmcp-windows-x64.exe,uffs-mft-windows-x64.exe.
π macOS Apple Silicon β offline MFT analysis
uffs-macos-arm64.zipβ recommended (normal tier): raw
binaries +uffs-tuidemo + a ready-to-runUFFS.appbundle- icns + docs +
packaging/macos/bundle.shfor rebuilding.
Also:uffs-macos-arm64-min.zip,uffs-macos-arm64-full.zip.
- icns + docs +
- Raw binaries:
uffs-macos-arm64,uffsd-macos-arm64,
uffsmcp-macos-arm64,uffs-mft-macos-arm64. - Intel Macs: run the arm64 build under Rosetta 2.
π§ Linux x86_64 β offline MFT analysis
uffs-linux-x64.zipβ recommended (normal tier): binariesuffs-tuidemo + full hicolor icon tree +
packaging/linux/install.sh(drops the.desktopentry and
icons under/usr/localwith onesudoinvocation) + docs.
Also:uffs-linux-x64-min.zip,uffs-linux-x64-full.zip.
- Raw binaries:
uffs-linux-x64,uffsd-linux-x64,
uffsmcp-linux-x64,uffs-mft-linux-x64. - Use with
--mft-fileto analyse captured MFT snapshots on servers, forensics VMs, or in Docker.
π Verification
All binaries are accompanied by SHA256 checksums in CHECKSUMS.txt.
Verify with:
sha256sum -c CHECKSUMS.txtAdditionally, every release asset carries a SLSA build-
provenance attestation signed with the workflow's Sigstore
OIDC identity. Verify with GitHub CLI:
gh attestation verify <file> --owner skyllc-aiA successful verification proves the bytes were produced by
this exact workflow run on this exact commit.
π SBOM (Software Bill of Materials)
Each workspace crate ships a CycloneDX 1.5 SBOM alongside the
binaries: sbom-<crate>.cdx.json. The SBOMs are covered by
the same SLSA attestation as the binaries, so you can verify
the inventory with the same command above. Inspect with any
CycloneDX-aware tool, e.g.:
jq '.components[] | {name, version, purl}' sbom-uffs-cli.cdx.jsonπ Installation
Recommended: ZIP bundle
- Download
uffs-<platform>.zipfor your platform. - Unzip anywhere.
- Windows: the
.exes are ready to run; place them onPATH. Icon +asInvokermanifest are already baked into the PE. - macOS: double-click
UFFS.app, or move the rawuffsbinary into/usr/local/bin/. First launch: Gatekeeper warns because the bundle is unsigned β right-click β Open to confirm, or runxattr -dr com.apple.quarantine UFFS.app. - Linux: run
sudo packaging/linux/install.shfrom the unzipped directory β installs the binary, the.desktopentry, and the full hicolor icon set. Override prefix withsudo PREFIX=/opt/uffs packaging/linux/install.sh.
Raw-binary path (automation)
- Download the individual binary, e.g.
uffs-linux-x64. - macOS / Linux:
chmod +x uffs-*then optionallymv uffs-* /usr/local/bin/uffs. - Windows: the
.exeis ready to run; place it onPATH.
π οΈ Build Information
- Triggered by: release-pr-merge-#419
- Commit: f3c0041
- Toolchain: pinned nightly from
rust-toolchain.toml - Profile:
[profile.release]β LTO=fat, codegen-units=1, strip=symbols - CPU baselines: x86_64 =
x86-64-v3(Haswell+/Zen+); macOS ARM64 =apple-m1(M1+)
Full Changelog: https://github.com/skyllc-ai/UltraFastFileSearch/commits/v0.6.1
What's Changed
- docs(readme): surface the sponsor ask, add install honesty, speed up install by @githubrobbi in #401
- fix(winget): seeder strips the unsupported portable Scope field by @githubrobbi in #402
- fix(broker): make the Access Broker work end-to-end + production follow-up playbook by @githubrobbi in #403
- fix(daemon): skip broker warm-up when the daemon is already elevated (FU-9) by @githubrobbi in #404
- refactor(mft): centralize broker-handle adoption into one primitive (SBB-1) by @githubrobbi in #405
- chore(broker): TEMP build-tag line in daemon + broker logs (VM validation) by @githubrobbi in #406
- fix(daemon): back off the journal poll instead of storming on failure (FU-2a) by @githubrobbi in #407
- fix(mft): open the USN journal through the broker handle (FU-2b) [HOLD: needs VM validation] by @githubrobbi in #408
- fix(mft): bootstrap MFT extents from FRS 0 on the non-elevated path (FU-3) by @githubrobbi in #409
- fix(mft): read $UpCase through the overlapped handle (FU-8) by @githubrobbi in #410
- fix(client): probe the broker pipe without connecting (FU-6) by @githubrobbi in #411
- perf(broker): WinVerifyTrust + cache for Authenticode, drop PowerShell (FU-4) by @githubrobbi in #412
- feat(broker): multi-instance threaded serve loop + OwnedHandle (FU-5, SBB-2) by @githubrobbi in #413
- feat(broker): Windows Service control dispatcher (FU-1) by @githubrobbi in #414
- fix(broker): FILE_FLAG_FIRST_PIPE_INSTANCE only on the first instance (FU-5 fix) by @githubrobbi in #415
- chore(broker): remove TEMP build tag + harden service install/uninstall (closing) by @githubrobbi in #416
- perf(daemon): bound the live-drive load fan-out (large-estate safety) by @githubrobbi in #417
- docs: document the Access Broker (CHANGELOG, README, CLAUDE.md) by @githubrobbi in #418
- chore: release v0.6.1 β ship pipeline auto-commit by @githubrobbi in #419
Full Changelog: v0.5.123...v0.6.1