Release Channels

Stable 3.0.0

Use this release if you want a stable and rigorously tested release. The only changes made to this channel between releases are bug fixes and security related updates to libraries and runtimes.

Release Candidate 3.1.x

Use this release if you want access to new functionality not found in the stable release.

Evimetry releases progress on two channels. The stable channel is lab and field tested, only receiving minor updates to fix security and minor bugs. The pre-release channel is for field testing of new functionality.

It is recommended that you use a Stable release as the basis of your practice, and validate its operation independently.


Release 3.1.3-UNSTABLE

Released Friday, 15 Sept 2017

Major Features

  • ALL: Multi-channel network connections for faster network communications.
  • Dead Boot Imager: Shift to XWindows based GUI rather than text GUI (some EFI implementations don't support text UI's).
  • Controller: Enable user settable priorities for non-linear acquisition.
  • Controller: iMEM endpoint enabling live analysis of volatile memory (ALPHA).

Fixes and improvements

  • Controller: Update licence display to simplify communication of licence entitlements.
  • ALL: Improved memory consumption across the board.
  • Dead Boot Agent: Update to kernels 4.4.0-79 and 4.11.3.
  • Light Agent (Linux): handle KASLR on linux kernel 4.11+ for physical memory acquisition.
  • Light Agent (Windows): correct intermittent device enumeration stringify bug.

Updates

  • Dead Boot Agent+Controller: Update to Oracle Java 8u131.
Download from Portal Link to this Release


Release 3.0.4

Released Friday, 31 Oct 2017

Fixes

  • Controller: Fixed a regression in virtual drive unmounting, which prevented unmounting the virtual disk. Primarily occurred when a Windows 8.1 or 10 based analysis workstation accessed a virtual disk containing NTFS volume snapshots.
  • Controller+Dead Boot Agent: Fixed an error verifying very old pre-standard AFF4 images.
  • Controller: Fixed high CPU usage on Windows 7 when no dongle present
Download from Portal Link to this Release


Release 3.0.3

Released Friday, 13 Oct 2017

Fixes

  • Fix excessive memory usage during verification in some instances.
  • Fix virtual drive unmounting issue with Controller -> Light Agent sharing in some circumstances.
Download from Portal Link to this Release


Release 3.0.2

Released Friday, 15 Sept 2017

Fixes and improvements

  • Controller: Update licence display to simplify communication of licence entitlements.
  • Light Agent (Linux): handle KASLR on linux kernel 4.11+ for physical memory acquisition.
  • Light Agent (Windows): correct device enumeration bug which occasionally prevented identification of storage devices.
Download from Portal Link to this Release


Release 3.0.1

Released Monday, 17 July 2017

Fixes and improvements

  • Improved memory consumption with light agent.
  • Fix Deadboot Agent -> Controller acquisition not honoring user requested abort.
  • Update TLS handshake to use AES256-GCM by default.
  • Correct disk share performance issue with Deadboot Agent -> Controller acquisition.
Download from Portal Link to this Release


Release 3.0.0

Released Monday, 22 May 2017

Major Features

  • Remote physical memory acquisition for Windows, MacOS and Linux.
  • Default image format is now AFF4 Standard v1.0
  • Support for HiDPI / Retina Displays.
  • Updated Linux kernel to 4.9.0 on Deadboot ISO.
  • Improved speed on striped images.
  • Beta release of MacOS Controller.

Fixes and improvements

  • Improved Multi-lingual support.
  • Improved compatibility with Linux iSCSI Initiators.
  • Improved performance of AFF4 Container verification.
  • UX simplification around evidence storage device unlocking and repository management.
  • Added pre-flight checks for potential issues that the user may experience.
  • Default TLS certificates issued with a wide valid date range so computers with bad BIOS times can still be communicated with.
Download from Portal Link to this Release


Release 3.0.0-RC6 (UNSTABLE)

Released Monday, 1 May 2017

Fixes

  • Fix regression in iSCSI virtual disk on Windows 10.
Download from Portal Link to this Release


Release 3.0.0-RC5 (UNSTABLE)

Released Friday, 7 April 2017

Major Features

  • Remote physical memory acquisition for Windows, MacOS and Linux.
  • Default image format is now AFF4 Standard v1.0
  • Support for HiDPI / Retina Displays.
  • Updated Linux kernel to 4.9.0 on Deadboot ISO.
  • Improved speed on striped images.
  • Beta release of MacOS Controller.

Fixes and improvements

  • Improved Multi-lingual support.
  • Improved compatibility with Linux iSCSI Initiators.
  • Improved performance of AFF4 Container verification.
  • UX simplification around evidence storage device unlocking and repository management.
  • Added pre-flight checks for potential issues that the user may experience.
  • Default TLS certificates issued with a wide valid date range so computers with bad BIOS times can still be communicated with.

Updates

  • OpenSSL 1.0.2k
  • Oracle JRE 8u121
Download from Portal Link to this Release


Release 2.1.7

Released Tuesday, 4 April 2017

Bug fixes

  • Update default TLS certificates due to certificate expiry.
  • Default TLS certificates issued with a wide valid date range so computers with bad BIOS times can still be communicated with.
Download from Portal Link to this Release


Release 2.1.6

Released Friday, 24 Feb 2017

Bug fixes

  • Fix device enumeration with Wiebetech USB3 write blocker on Windows.
  • Fix EWF segment enumeration for very large images.
Download from Portal Link to this Release


Release 2.1.5

Released Tuesday, 2 Feb 2017

Bug fixes

  • Update interoperability of Licence Dongle with RDP redirection.
  • Improve robustness of virtual disk mounter in presence of existing iSCSI configurations.

Additions

  • Improve Multi-lingual support.
Download from Portal Link to this Release


Release 2.1.4

Released Tuesday, 22 Nov 2016

Bug fixes

  • Fix performance regression in filesystem bridge.
  • Fix virtual disk sharing incompatibility with Encase 6.19.
  • Correct persistent paths in file system bridge when folders contain spaces.

Additions

  • Release Light Agent x64 build for Microsoft Windows.

Updates

  • Oracle Java 8u102.
Download from Portal Link to this Release


Release 2.1.3

Released Thursday, 18 Aug 2016

Bug fixes

  • Improve memory resource usage during allocated acquisitions on very large and heavily fragmented file systems.

Changes

  • Improve memory consumption post acquisition with Light Agent.
Download from Portal Link to this Release


Release 2.1.2

Released Friday, 29 July 2016

Bug fixes

  • Fixed failed unmount of evidence drive when using striped images in some circumstances.

Changes

  • Change error dialog with exception stack trace to be more readable.
  • Correct Controller displaying local host address as node address on Ubuntu 16.04+.

Additions

  • Enable the use of USB network adapters on Dead Booted Agents.
  • Enable image conversion sessions to be paused on the Controller.
  • Add Dead Boot Agent variant based on the Linux Kernel 4.2.0, useful for very recent hardware.
Download from Portal Link to this Release


Release 2.1.1

Released Monday, 25 July 2016

Bug fixes

  • Correct invalid characters in iSCSI transport for remote images in some instances.

Changes

  • Improve memory resource usage during non-linear partial acquisition.
Download from Portal Link to this Release


Release 2.1.0

Released Monday, 13 June 2016

Bug fixes

  • Improve reliability of FileSystem Bridge in network operations.
  • Improve memory consumption during Non-Linear Object based acquisitions on very large volumes.
  • Improve compatibility with EnCase 6 for generated EWF files

Changes

  • Queries.yaml schema includes descriptions/attributions
  • Improve startup performance of allocated region acquisition with EXTx based filesystems.
  • Improve high memory usage notification to the user. (Filesystem Bridge).
  • Improve scanning time of mounted repositories on the Controller and Filesystem Bridge.

Additions

  • Added logging option for matches of objects acquired during Non-Linear Object based acquisition. (Useful for developing and debugging object patterns)

Updates

  • OpenSSL 1.0.2h
  • Oracle Java 8u92
Download from Portal Link to this Release