Download this app from Microsoft Store for Windows 10, Windows 8.1. See screenshots, read the latest customer reviews, and compare ratings for Font Viewer. Font Awesome 4 is so 2017. Upgrade to version 5 and get twice the icons.
This page contains a history of the major features for each Autopsy® release (starting with 2.20).
New Releases
Use the Github pages to determine what changed in each release.
Older Data
4.14.0 (Jan 24, 2020)
Specialized UIs:- New File Discovery UI that allows you to search and filter for certain types of files.
- New Map viewer that uses either Bing (when online) or offline map tiles.
- Communications UI shows country names for phone numbers and fixed bug in summary panel.
- Fixed bugs in timeline filtering.
- Refactored backend timeline filtering code based on The Sleuth Kit datamodel changes to remove JavaFX dependency.
- Added limited support for APFS disk images. Does not include encrypted volumes or ones that span multiple disks. Uses contribution to The Sleuth Kit from Blackbag Technologies.
- New data source processor that parses 'XRY File Exports'.
- Added a new 'Context' viewer to show where a file came from. Currently shows what message a file was attached to or what URL a file was downloaded from.
- Added support to seek and change playback speed for videos in 'Application' viewer.
- Improved support for Unicode HTML files in 'Application' viewer.
- Added support for webp image files in 'Application' viewer.
- Keyword Search module uses Decodetect statistical encoding detection for plain text files. Fixes issues with incorrect detection of Japanese files.
- Embedded File Extractor module uses statistical analysis to determine encoding of file names in ZIP files. Fixes issues with ZIP files created on Windows Japanese computers.
- Solr (Keyword Search module) now uses Japanese-specific tokenization using Kuromoji.
- Fixed Shellbags module in RegRipper (used by Autopsy Recent Activity module) to fix parsing errors.
- Plaso module no longer generates an error if enabled for non-disk image data sources.
- Added support for message attachments that are stored as an external file system file. Expanded Email and Android modules to use this technique.
- Fixed crashes by gstreamer when a video is selected.
- Added initial capability to delete a data source from a case (excludes data in the CR).
- Changed behavior of portable case menu item to automatically open the case and warn if it was already unpacked.
- Fixed bug that caused issues when case metadata had Unicode values.
- Added new Attachment APIs to the CommunicationsArtifactHelper class to support attachments stored as external file system files.
4.13.0 (Oct 14, 2019)
More detailed list can be found in the NEWS.txt file.
- Full command line support (case creation, adding of data sources, running ingest, and generating reports).
- Logical Imager updates so that output can be individual files instead of VHD
- Expanded Android support for messaging, browsers, file transfer, and map apps
- Parse Recycle Bin and make artifacts and deleted files. Code is based on Mark McKinnon's RecycleBin module.
- ShellBag registry data is extracted from RegRipper in the Recent Activity module. New artifacts are recreated for the data. Based on Mark McKinnon's 'Parse ShellBags' module.
- Additional data is extracted about users from SAM hive in Recent Activity module. Data includes password dates, permissions, groups, and full name. Based on Mark McKinnon's 'Parse SAM' module.
- Email ingest module parses EML files. Based on Mark McKinnon's 'EML Parser' module.
- New Plaso ingest module that runs Plaso and generates events for the timeline.
- New approach for storing event data. A dedicated events table exists and is populated as files and artifacts are added to the database. No longer requires an explicit step of populating a local events table.
- New classes were created to make it easier to write modules for apps.
- Keyword Search module waits longer for Solr to start to prevent incorrectly reporting a problem and disabling the feature.
- Embedded file extractor module was updated to not report compression bombs for GZIP files.
- Fixed bug that hid contact book entries with duplicate numbers.
- Image tags are included in portable case.
4.12.0 (Aug 2, 2019)
More detailed list can be found in the NEWS.txt file.
New Features:- Initial logical imager feature
- Changed file type detection so that Tika does not rely only on extension.
- Communications:
- Emails are threaded
- Added Account Summary view
- Added Contacts panel to show all contacts associated with an account.
- Added Media panel to show media attachments associated with an account
- Added filter to show accounts if they involved with the most recent messages.
- Added ability to draw a box on a picture while tagging it.
- Improved speed of displaying results when a column was sorted.
- Portable cases can contain files marked as Interesting Items and be compressed.
- New 'Text' viewer that consolidates previous Strings and 'Indexed Text' viewers.
- New 'Translation' panel with integrations for Google and Bing (credentials required)
- Added Willi Ballentin's 'Registry Hive Viewer' panel to the 'Application' viewer.
- Improved HTML viewer to use style sheets and better layout.
- Added paging to all views for faster loading of large data sets.
4.11.0 (Apr 26, 2019)
More detailed list can be found in the NEWS.txt file.
New Features:- Portable Cases can be created based on tagged data. These cases contain a subset of the case data and can be opened anywhere.
- Added support for Microsoft Edge and Safari. Expanded support for Chrome and Firefox.
- Parse Zone.Identifier files to identify the source of files.
- Added support for parsing vCards (virtual cards).
- Extract more information about Windows user accounts (number of logins, creation date, and last login)
- The Application content viewer now displays HTML files.
- Video playback now uses gstreamer on 64-bit systems, which supports more video formats.<>New 'Data Source Summary' panel shows high-level statistics and details about the data sources in the case.
4.10.0 (Jan 15, 2019)
More detailed list can be found in the NEWS.txt file.
New Features:- Central Repository
- Case Manager shows data source details
- SSID, MAC address, IMEI, IMSI, and ICCID can be stored and correlated on
- SSID, MAC address, IMEI, IMSI, and ICCID values from past cases are flagged if they are seen again in the current case.
- File types can be specified when searching for common files with past cases.
- Results from finding common files with past cases is now organized by case instead of by number of occurrences.
- The Central Repository can now be searched for a specific value (hash, email, etc.)
- The E01 Verifier ingest module was renamed to Data Source Integrity module and it will:
- Calculate hashes if none exist for a non-E01 data source
- Validate hashes if they are defined
- MD5, SHA1, or SHA256 hash values of raw data sources can now be specified when they are added.
- Added the ability for examiners to select the time zone for displaying dates.
- Tesseract OCR text extraction for keyword search now supports languages other thanEnglish, if language packs are installed.
- Custom headers and footers can now be added to HTML reports.
- New report module to export basic file data in CASE/UCO format.
- Ingest filter rules (for triage) can now specify a list of extensions (such as 'jpg,jpeg,png') instead of needing to make a rule for each extension.
- Image Gallery
- Refactored to ensure database was fully closed when case was closed.
- No longer pre-populate DrawableDB database.
- Added caching to reduce time required to insert files after analysis.
- Duplicate interesting item and EXIF metadata artifacts are no longer createdwhen you run the modules that generate them more than once.
- The Application content viewer now displays SQLite table column names evenwhen the table is empty.
- Assorted small bug fixes are included.
4.9.1 (Nov 9, 2018)
More detailed list can be found in the NEWS.txt file.
Bug Fixes:- Fixed possible ingest deadlock from Image Gallery database inserts.
- Image Gallery does not need lock on Case DB during pre-population, which makes UI more responsive.
- Other misc Image Gallery fixes.
4.9.0 (Oct 14, 2018)
More detailed list can be found in the NEWS.txt file.
New Features:- Removed data from table that are time intensive and can be found in content viewers (such as hash set hits)
- Added ability to find common items (files, emails, etc.) between current case and past cases using the Central Repository.
- Added ability to ignore common items that exist in a large number of cases by using Central Repository data.
- Data is validated and normalized before being entered into the Central Repository.
- Allow users to specify that an ad-hoc keyword search should not be saved to database
- New 'Annotations' content viewer that shows all tags and comments associated with an item
- Added 2 icons to the table to show the item's score (if it is notable or suspicious) and if it has a comment.
- Added column to the table to show previous number of occurrences.
- Tags are now associated with the user (in a multi-user environment) and you can hide other people's tags
- New Display options area that unifies various new settings.
- Hash sets can be copied into the user's config folder (AppData), which makes it easier to run Autopsy from a Live Triage USB and not care about what drive letter it gets.
- Image Gallery stores its groups and seen status in Case DB instead of its own.
- Image Gallery works better in multi-user setups and reloads the database when other nodes add data sources.
- Image Gallery saves which user saw a group and gives user option of seeing only their unseen groups or all unseen groups.
- Saves last export location and pre-populates that in the file picker
- Provide feedback about why some right click options are disabled (ingest is running, not file content, etc.)
- Substring keyword search is more accurate (now uses regular expression)
- New text extractor for SQLite that better deals with full text search tables
- Better deal with Unicode text files that do not have Byte Order Marker
- Embedded file extractor module is now faster because it uses a different 7ZIP API.
- Fixed various HTML report bugs
- Duplicate hash set hits are not created when you run the Hash Ingest Module twice.
- Auto ingest (in Experimental) scan times of input folders is faster.
4.8.0 (Aug 8, 2018)
More detailed list can be found in the NEWS.txt file.
New Features:- Data Source Grouping:
- The case tree view can now be grouped by data source.
- Keyword and file search can now be restricted to a data source.
- Central Repository / Correlation:
- New common files search feature that finds files that exist in multiple devices in the same case.
- The Other Occurrences content viewer now shows matches in the current case (in addition to central repository).
- Central repository options panel now shows cases that are in repo.
- A comment about a file can be created and saved in the central repository so that future cases and see it.
- Keyword Search:
- Can enable OCR text extraction of PDF and JPG files using Tesseract.
- Keyword search module normalizes Unicode text.
- Keyword search module uses ICU to convert text files that do not have a BOM.
- Tagging:
- Tagging menu changed to have user defined tags at top and 'quick tag' removed one level of menus.
- New 'Replace Tag' feature to change the tag on an item.
- Other:
- SQLite tables can be now be exported to CSV files.
- An interesting file artifact is now created when a 'zip bomb' is detected.
- An object detection ingest module was added to the Experimental module. It requires an OpenCV trained model.
- Expanding the case tree is more efficient.
- Improved 'zip bomb' detection.
- Assorted small bug fixes are included.
4.7.0 (May 8, 2018)
More detailed list can be found in the NEWS.txt file.
New Features:- A graph visualization was added to the Communications tool to make it easier to find messages and relationships.
- A new 'Application' content viewer (lower right) that will contain file-type specific viewers (to reduce number of tabs).
- New viewer for SQLite databases (in Application content viewer)
- New viewer for binary PLists (in Appilcation content viewer)
- L01 files can be imported as data sources.
- Ingest filters can now use date range conditions for triage.
- Passwords to open password protected archive files can be entered (by right clicking on the file).
- Reports (e.g., RegRipper output) generated by ingest modules are now indexed for keyword search.
- PhotoRec carving module can be configured to keep corrupted files.
- Sector size can be specified for local drives and images when E01 is wrong or it is a raw image.
- New data source processor in Experimental module that runs Volatility, adds the outputs as files, and parses the reports to provide INTERESTING_FILE artifacts.
- Assorted small enhancements are included.
- Memory leaks and other issues revealed by fuzzing the The Sleuth Kit have been fixed.
- Result views (upper right) and content views (lower right) stay in synch when switching result views.
- Concurrency bugs in the ingest tasks scheduler have been fixed.
- Assorted small bug fixes are included.
4.6.0 (Feb 22, 2018)
More detailed list can be found in the NEWS.txt file.
New Features:- A new Message content viewer was added to make it easier to view email message contents.
- A new Communications interface was added to make it easier to find messages and relationships.
- Hash sets can be centrally stored and shared in the Central Repository.
- New Encryption Detection module that will flag possibly encrypted files.
- Can more easily run Autopsy from a USB drive and leave few traces on target system.
- Tag definitions now have a 'notable' property. The Central Repository uses this to mark files as notable.
- Large slack files are now file typed.
- The maximum number of Solr connections and ingest threads have increased.
- Periodic keyword search will dynamically change based on how long queries are taking.
- Users can change the amount of memory allocated to the application.
- The amount of memory required for processing keyword hits has been reduced.
- Layout of HTML reports has been modified make it easier to open.
- 'Databases' was added to File Type by Extension view.
- Users can now enter more information about cases including examiner, organization, etc.
- New dialog to open multi-user cases that allows for searching.
- Auto ingest metrics are collected and displayed in dashboard.
- Auto ingest module that extracts disk images from archive files.
- Keyword search has been made more responsive to both search and ingest job cancellation.
- Number of log files to keep before rollover is now configurable.
- Preliminary changes to make Linux and OS X builds easier.
- Memory leaks and other issues revealed by fuzzing the SleuthKit havebeen fixed.
- Memory issues caused by Tika are fixed (by upgrading to 1.17)
- Assorted small enhancements and bug fixes are included.
Font Sleuth 2 4 4 – Font Browser And Organizer Free
4.5.0 (Oct 13, 2017)
More detailed list can be found in the NEWS.txt file.
- Memory usage has been reduced to improve support for very large cases.
- New central repository feature has been added that allows you to correlate between cases and track if an item was previously identified as being 'bad' or notable.
- Message attachments are not associated with the message (and not just the source file). These can be found in the data sources and messages parts of the tree.
- Credit card number search has added logic to reduce false positives based on number lengths.
- Virtual directory nodes in the tree view are distinguished in the Data Sources tree by the addition of a 'V' to their icon. These are folders that Autopsy/TSK created.
- A new version of the automated ingest dashboard has been added to allow insight into pending, running and completed automated ingest jobs in automated ingest Examiner mode.
- All occurrences of 'Known Bad' in the user interface have been changed to 'Notable.'
- Assorted small enhancements and bug fixes are included.
4.4.1 (Aug 9, 2017)
More detailed list can be found in the NEWS.txt file.
- Beta version of new central repository feature has been added for correlating artifacts across cases; results are displayed using an Interesting Artifacts branch of the Interesting Items tree and an Other Data Sources content viewer.
- Results viewer (top right area of desktop application) sorts are persistent and can be applied to either the table viewer or the thumbnail viewer.
- The View Source File in Directory context menu item now works correctly.
- Tagged image files in the HTML report are now displayed full-size.
- Case deletion is now done using a Case menu item and both single-user and general (not auto ingest) multi-user cases can be deleted.
- Content viewers (bottom right area of desktop application) now resize correctly.
- Some potential deadlocks during ingest have been eliminated.
- Assorted performance improvements, enhancements, and bug fixes.
4.4.0 (May 30, 2017)
More detailed list can be found in the NEWS.txt file.
- Keyword search regular expressions now work with spaces.
- A sparse VHD file can be created when analyzing a local drive (USB) so that you don't need to acquire first.
- Ingest filters allow you to run the ingest modules only a subset of files during triage
- Ingest profiles allow you to pick an ingest filter and set of ingest modules to make it eaiser to preprogram for triage
- User can edit keyword lists.
- Import/export of interesting files set membership rules.
- Fix resolution issue with high DPI systems
- Updated Recent Activity ingest module to use RegRipper 2.8 plugins.
- Ability to customize HTML report logo.
- Assorted small enhancements and bug fixes.
4.3.0 (Jan 18, 2017)
More detailed list can be found in the NEWS.txt file.
- Support for slack space on files (as separate virtual files) to enable keyword searching and other analysis.
- Simple mode for the file extension mismatch module that focuses on only only multimedia and executable files to reduce false positives.
- New view in tree that shows the MIME types.
- Tagged items are highlighted in table views.
- Ordering of columns is saved when user changes them.
- Support for Android devices with preloaders (uses backup GPT)
- Support for images with no file systems (all data is added as unallocated space)
- User can bulk add list of keywords to a keyword list.
- New 'Experimental' module (activate via Tools, Plugins) with auto ingest feature.
- Assorted bug fixes and minor enhancements.
4.2.0 (Oct 26, 2016)
More detailed list can be found in the NEWS.txt file.
- Credit card account search.
- Encoding/decoding of extracted files to avoid anti-virus alerts/quarantine.
- Ingest history used to warn before doing redundant analysis.
- Options panel for managing custom tag names.
- Options panel for setting external viewer associations.
- Keyboard shortcut for applying Bookmark tags.
- Improved PhotoRec carver ingest module cancellation responsiveness.
- Results content viewer formats dates.
- Update to PostgreSQL 9.5.
- Assorted bug fixes and minor enhancements.
4.1.1 (Aug 18, 2016)
More detailed list can be found in the NEWS.txt file.
- Bug fix to enable some Python modules to run again.
4.1.0 (July 20, 2016)
More detailed list can be found in the NEWS.txt file.
- New list view in Timeline tool
- VMWare virtual machine files (vmdk) and Microsoft Virtual Hard Drives (vhd) can be added as data sources.
- New ingest module detects vmdk and vhd files embedded in other data sources and adds them as data sources.
- Text associated with blackboard artifacts is indexed and searched for keywords.
- Custom (user-defined) blackboard artifact and attribute types are displayed in the UI and included in reports.
- File size and MIME type conditions can be specified for interesting files set membership rules.
- Assorted bug fixes and minor enhancements.
4.0.0 (Nov 2, 2015)
- Multi-user cases supported that allow collaboration using network-based services.
- Image Gallery feature released.
- Assorted minor fixes and enhancements
3.1.3 (June 26, 2015)
- New Embedded File Extractor module that incorporates ZIP file module and extracts images from Office documents
- Views area counts updates when ZIP files and such are found
- Updates to python scripting for Python 2.7, scripts are reloaded each time ingest is run, and errors are better shown.
- Updated right click actions to be consistent across all file types
- Changed logic of Interesting Files module to look for substrings of parent path.
- Lots of minor fixes and enhancements
3.1.2 (Mar 4, 2015)
Improvements:
- New PhotoRec carving ingest module
- Regripper output is available as a report instead of TOOL_OUTPUT artifact
- Updated version of RegRipper
- New STIX/Cybox report module (manually run after image has been analyzed)
- File type module supports user defined file types and can alert when they are found
- More artifacts are extracted from registry
- Metadata tab in lower right now also shows istat (TSK) output for more metadata details
- User docs were moved online (http://sleuthkit.org/autopsy/docs/user-docs/3.1/)
3.1.1 (Nov 4, 2014)
Improvements:
- New time line feature
- New Interesting Files module
- Added support for Python modules
- Updated HTML report
- Media Content viewer uses blackboard artifacts and detects PNG by sig.
- New logo
Bug Fixes:
- Adding local disk errors
- ZIP files inside of RAR files are properly extracted
3.1.0 (Aug 20, 2014)
Numerous changes are in this release. Here are the big items:
- Multi-threaded pipelines
- File type ingest module
- File extension mismatch ingest module
- Android ingest module
- KML report module
- Tags can be deleted
- Hash databases can be created and maintained
3.0.10 (Apr 10, 2014)
This is a bug fix release. It adds the correct Windows dlls for the 64-bit installer.
3.0.9 (Feb 3, 2014)
This is a new feature and bug fix release. Nearly all work done by Basis Technology.
See the NEWS.txt file for more details.
- Regular expression keyword search works on file names.
- Fixed thunderbird parser for subject and dates
- Fixed errors in hex viewer
- New 'EnCase-style' report that lists files and metadata in tab delimited file
- Removed xdock definitions -> some claim this helps with memory problems
- More lazy loading to help performance with big folders and sets of files
- Times can be displayed in local time or GMT
- Changed report wizard to make one report at a time
- Updated SQLite to 3.8.0
- Enhanced reporting on keyword search module errors
- report improvements (only regnerate if data exists)
- more error messages if recent activity module fails
- more error checking in recent activity module and don't bail as quickly
- Cleanup of recent activity module
- better handle if ingest module throws exception during init()
- do not run ingest if any module faile to init()
- Added FILE_DONE event to ingest manager
- Added search engine parsers for linkedin, twitter, and facebook
- HTML text is better formatted
- Report generation performance
- HTML parser is skipped for files bigger than 50MB.
3.0.8 (Oct 16, 2013)
This fixes a broken installer from 3.0.7 that caused Keyword Search to not work on some systems. No other features in this release.
3.0.7 (Sep 25, 2013)
This is a new feature and bug fix release. Nearly all work done by Basis Technology.
See the NEWS.txt file for more details.
Improvements:
- 64-bit support (JavaFX for video)
- Multi-select
- different sized thumbnails
- Custom tags persist across runs of the app
- RegRipper is run on each hive and raw output is available.
- Metadata content viewer
Bug Fixes:
- Several -> Didn't keep good track in this file.
- TSK Bug fixes, including fix for showing deleted NTFS files in wrong parent folder.
- Error messages from adding disk to database are better displayed.
- RecentActivity better reports errors parsing data
3.0.6 (Jun 19, 2013)
This is a new feature and bug fix release. All work done by Basis Technology.
Improvements:
- Logical files and folders support
- New file views in directory tree to view: deleted, executable, archive files and files by size
- ext4 and yaffs2 support (via TSK 4.1.0)
- Improvements to tagging of files and keyword search results
- Any file and folder can be selectively ingested using the directory tree view
Bug Fixes:
- Keyword Search: fix when Solr does not cleanly shutdown
- fix for 'Process Unallocated Space' option doesn't do anything
- fixed result viewer for 'File Search by MD5 Hash'
- fix Solr, Timeline and RecentActivity issues with java 7.0.21
- Views->Recent Files showing inconsistent results when clicked many times
- reduced memory usage in Timeline
See the NEWS.txt file for more details.
3.0.5 (Mar 26, 2013)
This is a new feature and bug fix release. All work done by Basis Technology.
Improvements:
- New ingest module for ZIP and other archive formats
- Timeline (Beta)
- improved image loading in Media View and Thumbnail View (faster loading, handles large files better)
- Uses more signatures instead of extensions (keyword search and exif modules)
- Updated Ingest Message Inbox
Bug Fixes:
- fixed memory leaks in 'Add Image'
- The 'media view' tab is inactive for deleted files (#165)
- fixed directory tree history being reset when tree is refreshed.
See the NEWS.txt file for more details.
3.0.4 (Jan 23, 2013)
This is a bug fix and feature update release. All work done by Basis Technology.
Improvements:
- File tagging.
- Error notification in lower right.
Bug Fixes:
- DLL installation issues fixed.
- Out of memory configuration changed.
- Issue that caused duplicate keyword search results.
- Crash when generating HTML and Excel reports with special characters.
- MS Office text extraction
- EXIF data not being extracted
See the NEWS.txt file for more details.
3.0.3 (Jan 8, 2013)
Font Sleuth 2 4 4 – Font Browser And Organizer Tool
This is a bug fix and feature update release. All work done by Basis Technology.
Improvements:
- Upgrade to Solr4.0 / Tika 1.2: Improved performance and highlighting
- Remake of reporting UI and functionality
- Significant increase in reporting speed
- New option to keep the most specific file viewer (default) or the lastly used viewer active.
Bug Fixes:
- Fixed bug that caused the ends of large amounts of text to not be indexed (occurs mostly in unallocated space). All users should upgrade.
See the NEWS.txt file for more details.
3.0.2 (Dec 20, 2012)
This is a bug fix and feature update release. All work done by Basis Technology.
Improvements:
- New feature to extract unallocated space as a single file.
- Hashkeeper database support
- Can add comments to bookmarks and bookmarks are reported.
- Queuing time is reduced during ingest.
- Jump to arbitrary pages in thumbnail view.
- Changed flow of add image wizard to configure modules while database is being populated.
- Changed HTML report layout.
Bug Fixes:
- Fixed keyword search interval (did not run until end)
- Fixed domain type in Web Downloads adata.
- Added hash and keyword search results to report.
- Fixed UI issue whereby NSRL was always being looked up.
See the NEWS.txt file for more details.
3.0.1 (Nov 15, 2012)
This is a bug fix and feature update release. All work done by Basis Technology.
Improvements:
- Significant performance improvements when adding images.
- Slight improvements in UI performance for large number of results.
- Improved stability when running ingest on multiple images.
- Removed limit on number of results displayed.
- Thumbnail viewer - added paging and removed limit of images.
- Better HTML report navigation, handling large reports better.
- Updated Add image wizard to support local devices.
Bug Fixes:
- Fixed reading content from multiple file attributes (NTFS, HFS).
- Added ability to extract contents of the unalloc files.
- Enable user to select any image file extension when opening image.
- Thunderbird parser module fixes.
- Reporting fixes: added missing artifacts (keyword search, hash hits, file bookmarks).
See the NEWS.txt file for more details.
3.0.0 (Oct 15, 2012)
The following enchancements were done since the last beta by Basis Technology. Refer to the below history for all of the things that went into making 3.0.
Improvements:
- Upgraded versions of libraries
- Internal ingest framework enhancements
Bug Fixes:
- UI fixes in content and result viewers
- UI fixes in Hash Database and Keyword Search options.
- Excel report export produced corrupt files sometimes.
- Fixed issue where SOLR would not always launch.
See the NEWS.txt file for more details.
3.0.0b5 (Sept 14, 2012)
Development by Basis Technology.New Features:
- Extract non-English strings from unknown file types.
- Extract more data from HTML files.
- Extract EXIF data
- Basic bookmark support
- Body file report module
Bug Fixes:
- Better memory footprint of keyword search
- Media player occasionaly crashes
See the NEWS.txt file for more details.
3.0.0b4 (July 3, 2012)
Development by Basis Technology and 42Six Solutions. Funded by US Army Intelligence Center of Excellence (USAICoE). New Features:
- MBOX / Thunderbird parsing module
- Better lnk file parsing
Bug Fixes:
- Included needed jar file for Recent Activity (Issue #52).
- Fixed error handling from ingest (Issue #53)
See the NEWS.txt file for more details.
3.0.0b3 (June 13, 2012)
Development by Basis Technology and 42Six Solutions. Funded by US Army Intelligence Center of Excellence (USAICoE). New Features:
- Ingest manager runs triage/ingest task after disk is added.
- Keyword search (indexed via SOLR)
- Recent activity extract (web artifacts, recent documents, devices, etc.)
- Improved UI
See the NEWS.txt file for more details.
3.0.0b2 (Nov 9, 2011)
Development by Basis Technology. New Features:
- New database design
- Hashlookup / calculation
- Minor overall improvements
- NOTE: Cases created with b1 are not supported in b2 (different DB)
See the NEWS.txt file for more details.
3.0.0b1 (Aug 16, 2011)
Initial release. Development by Basis Technology.
- Windows only
- Directory tree
- File Search
- Table and thumbnail viewer
Version 2.24 (Mar 31, 2010)
Font Sleuth 2 4 4 – Font Browser And Organizer Pdf
Minor bug fixes (HFS directories). See the CHANGES.txt file for more details.
Version 2.23 (Feb 18, 2010)
Minor bug fixes (sorter issues). See the CHANGES.txt file for more details.
Version 2.22 (Jan 13, 2010)
Minor bug fixes and updates. See the CHANGES.txt file for more details.
Version 2.21 (Feb 2, 2009)
Minor bug fixes.
Version 2.20 (Oct 19, 2008)
This release contains minor feature upgrades to maintian compatability with TSK 3.0.0. TSK 3.0.0 has new tools, flags, and better handling and viewing of deleted files.
If you are one of those people who work with fonts on regular basis, then choosing, comparing and analyzing fonts is a serious business for you. Font management is not always as easy as a walk on the cake. Font management issues like installing and uninstalling fonts, handling missing fonts, taking care of font conflicts always keep graphic designers and typographers on their toes.
Also hundreds or thousands of fonts activated on the system can use up considerable amount of system resources which in turn reduces efficiency and productivity. Mac, Windows and Linux platforms have their own font management utilities, but these utilities are not sufficient in a specialized or professional environment. This is where professional font management tools come to the rescue.
You may want to check out the following related articles:
Below we have reviewed 25 free/commercial font managers for Mac, Windows and Linux. Which one do you use and why? Your favourite tool is missing? Let us know in the comments!
Suitcase (Win) / Suitcase Fusion (Mac)
Suitcase Fusion (Mac) and Suitcase (Win) are powerful, quick and clever font managers which have a simple and an intuitive user interface.
While previous versions of Suitcase created a database of information about your fonts, the fonts remained in their original location. You still have this option in Suitcase Fusion but also have the option to collect your fonts in a structured and secure repository called the Font Vault. The Font Vault gives users much more control over their fonts, eliminating unnecessary font conflicts, duplicate font issues and providing easy access to your own library.
Suitcase ensures you have the exact version of the font you need and prevents potential font wrecks (due to missing or substituted fonts. It also keeps fonts in one, secure location – easy to find and back-up. It also offers auto-activation: only the fonts you need are activated when you open a document and deactivated when you close.
With both Suitcase Fusion and Suitcase for Windows you get FontDoctor. FontDoctor is a professional software tool that takes the work out of locating, diagnosing and repairing the most common font problems, so you can stay focused on the task at hand. Suitcase Fusion price starts at $99.95. Suitcase Fusion is for Mac and PC.
Main features:
- Easy-To-Use interface
- Organization with font sets
- Font previews
- Font Sense, the most advanced font matching technology available, that allows for a deep level of font analysis when identifying fonts for auto-activation using multiple criteria—font type, foundry, version, etc.
- Keeping font library secure and organized
- Font auto-activation
- Windows Vista compatible
- Powerful font diagnosis and repair
- Font Doctor (free with purchase)
Linotype FontExplorer X (Win / Mac, free)
What makes Linotype FontExplorer X really different, is the integration of an online store which lets you browse through fonts you are considering for purchasing. Hence, you can examine and compare fonts inside FontExplorer X's online store as if they were installed on your system. The tool combines font management, font sorting, font shopping and font discovery in one user-friendly interface.
Improvements:
- New PhotoRec carving ingest module
- Regripper output is available as a report instead of TOOL_OUTPUT artifact
- Updated version of RegRipper
- New STIX/Cybox report module (manually run after image has been analyzed)
- File type module supports user defined file types and can alert when they are found
- More artifacts are extracted from registry
- Metadata tab in lower right now also shows istat (TSK) output for more metadata details
- User docs were moved online (http://sleuthkit.org/autopsy/docs/user-docs/3.1/)
3.1.1 (Nov 4, 2014)
Improvements:
- New time line feature
- New Interesting Files module
- Added support for Python modules
- Updated HTML report
- Media Content viewer uses blackboard artifacts and detects PNG by sig.
- New logo
Bug Fixes:
- Adding local disk errors
- ZIP files inside of RAR files are properly extracted
3.1.0 (Aug 20, 2014)
Numerous changes are in this release. Here are the big items:
- Multi-threaded pipelines
- File type ingest module
- File extension mismatch ingest module
- Android ingest module
- KML report module
- Tags can be deleted
- Hash databases can be created and maintained
3.0.10 (Apr 10, 2014)
This is a bug fix release. It adds the correct Windows dlls for the 64-bit installer.
3.0.9 (Feb 3, 2014)
This is a new feature and bug fix release. Nearly all work done by Basis Technology.
See the NEWS.txt file for more details.
- Regular expression keyword search works on file names.
- Fixed thunderbird parser for subject and dates
- Fixed errors in hex viewer
- New 'EnCase-style' report that lists files and metadata in tab delimited file
- Removed xdock definitions -> some claim this helps with memory problems
- More lazy loading to help performance with big folders and sets of files
- Times can be displayed in local time or GMT
- Changed report wizard to make one report at a time
- Updated SQLite to 3.8.0
- Enhanced reporting on keyword search module errors
- report improvements (only regnerate if data exists)
- more error messages if recent activity module fails
- more error checking in recent activity module and don't bail as quickly
- Cleanup of recent activity module
- better handle if ingest module throws exception during init()
- do not run ingest if any module faile to init()
- Added FILE_DONE event to ingest manager
- Added search engine parsers for linkedin, twitter, and facebook
- HTML text is better formatted
- Report generation performance
- HTML parser is skipped for files bigger than 50MB.
3.0.8 (Oct 16, 2013)
This fixes a broken installer from 3.0.7 that caused Keyword Search to not work on some systems. No other features in this release.
3.0.7 (Sep 25, 2013)
This is a new feature and bug fix release. Nearly all work done by Basis Technology.
See the NEWS.txt file for more details.
Improvements:
- 64-bit support (JavaFX for video)
- Multi-select
- different sized thumbnails
- Custom tags persist across runs of the app
- RegRipper is run on each hive and raw output is available.
- Metadata content viewer
Bug Fixes:
- Several -> Didn't keep good track in this file.
- TSK Bug fixes, including fix for showing deleted NTFS files in wrong parent folder.
- Error messages from adding disk to database are better displayed.
- RecentActivity better reports errors parsing data
3.0.6 (Jun 19, 2013)
This is a new feature and bug fix release. All work done by Basis Technology.
Improvements:
- Logical files and folders support
- New file views in directory tree to view: deleted, executable, archive files and files by size
- ext4 and yaffs2 support (via TSK 4.1.0)
- Improvements to tagging of files and keyword search results
- Any file and folder can be selectively ingested using the directory tree view
Bug Fixes:
- Keyword Search: fix when Solr does not cleanly shutdown
- fix for 'Process Unallocated Space' option doesn't do anything
- fixed result viewer for 'File Search by MD5 Hash'
- fix Solr, Timeline and RecentActivity issues with java 7.0.21
- Views->Recent Files showing inconsistent results when clicked many times
- reduced memory usage in Timeline
See the NEWS.txt file for more details.
3.0.5 (Mar 26, 2013)
This is a new feature and bug fix release. All work done by Basis Technology.
Improvements:
- New ingest module for ZIP and other archive formats
- Timeline (Beta)
- improved image loading in Media View and Thumbnail View (faster loading, handles large files better)
- Uses more signatures instead of extensions (keyword search and exif modules)
- Updated Ingest Message Inbox
Bug Fixes:
- fixed memory leaks in 'Add Image'
- The 'media view' tab is inactive for deleted files (#165)
- fixed directory tree history being reset when tree is refreshed.
See the NEWS.txt file for more details.
3.0.4 (Jan 23, 2013)
This is a bug fix and feature update release. All work done by Basis Technology.
Improvements:
- File tagging.
- Error notification in lower right.
Bug Fixes:
- DLL installation issues fixed.
- Out of memory configuration changed.
- Issue that caused duplicate keyword search results.
- Crash when generating HTML and Excel reports with special characters.
- MS Office text extraction
- EXIF data not being extracted
See the NEWS.txt file for more details.
3.0.3 (Jan 8, 2013)
Font Sleuth 2 4 4 – Font Browser And Organizer Tool
This is a bug fix and feature update release. All work done by Basis Technology.
Improvements:
- Upgrade to Solr4.0 / Tika 1.2: Improved performance and highlighting
- Remake of reporting UI and functionality
- Significant increase in reporting speed
- New option to keep the most specific file viewer (default) or the lastly used viewer active.
Bug Fixes:
- Fixed bug that caused the ends of large amounts of text to not be indexed (occurs mostly in unallocated space). All users should upgrade.
See the NEWS.txt file for more details.
3.0.2 (Dec 20, 2012)
This is a bug fix and feature update release. All work done by Basis Technology.
Improvements:
- New feature to extract unallocated space as a single file.
- Hashkeeper database support
- Can add comments to bookmarks and bookmarks are reported.
- Queuing time is reduced during ingest.
- Jump to arbitrary pages in thumbnail view.
- Changed flow of add image wizard to configure modules while database is being populated.
- Changed HTML report layout.
Bug Fixes:
- Fixed keyword search interval (did not run until end)
- Fixed domain type in Web Downloads adata.
- Added hash and keyword search results to report.
- Fixed UI issue whereby NSRL was always being looked up.
See the NEWS.txt file for more details.
3.0.1 (Nov 15, 2012)
This is a bug fix and feature update release. All work done by Basis Technology.
Improvements:
- Significant performance improvements when adding images.
- Slight improvements in UI performance for large number of results.
- Improved stability when running ingest on multiple images.
- Removed limit on number of results displayed.
- Thumbnail viewer - added paging and removed limit of images.
- Better HTML report navigation, handling large reports better.
- Updated Add image wizard to support local devices.
Bug Fixes:
- Fixed reading content from multiple file attributes (NTFS, HFS).
- Added ability to extract contents of the unalloc files.
- Enable user to select any image file extension when opening image.
- Thunderbird parser module fixes.
- Reporting fixes: added missing artifacts (keyword search, hash hits, file bookmarks).
See the NEWS.txt file for more details.
3.0.0 (Oct 15, 2012)
The following enchancements were done since the last beta by Basis Technology. Refer to the below history for all of the things that went into making 3.0.
Improvements:
- Upgraded versions of libraries
- Internal ingest framework enhancements
Bug Fixes:
- UI fixes in content and result viewers
- UI fixes in Hash Database and Keyword Search options.
- Excel report export produced corrupt files sometimes.
- Fixed issue where SOLR would not always launch.
See the NEWS.txt file for more details.
3.0.0b5 (Sept 14, 2012)
Development by Basis Technology.New Features:
- Extract non-English strings from unknown file types.
- Extract more data from HTML files.
- Extract EXIF data
- Basic bookmark support
- Body file report module
Bug Fixes:
- Better memory footprint of keyword search
- Media player occasionaly crashes
See the NEWS.txt file for more details.
3.0.0b4 (July 3, 2012)
Development by Basis Technology and 42Six Solutions. Funded by US Army Intelligence Center of Excellence (USAICoE). New Features:
- MBOX / Thunderbird parsing module
- Better lnk file parsing
Bug Fixes:
- Included needed jar file for Recent Activity (Issue #52).
- Fixed error handling from ingest (Issue #53)
See the NEWS.txt file for more details.
3.0.0b3 (June 13, 2012)
Development by Basis Technology and 42Six Solutions. Funded by US Army Intelligence Center of Excellence (USAICoE). New Features:
- Ingest manager runs triage/ingest task after disk is added.
- Keyword search (indexed via SOLR)
- Recent activity extract (web artifacts, recent documents, devices, etc.)
- Improved UI
See the NEWS.txt file for more details.
3.0.0b2 (Nov 9, 2011)
Development by Basis Technology. New Features:
- New database design
- Hashlookup / calculation
- Minor overall improvements
- NOTE: Cases created with b1 are not supported in b2 (different DB)
See the NEWS.txt file for more details.
3.0.0b1 (Aug 16, 2011)
Initial release. Development by Basis Technology.
- Windows only
- Directory tree
- File Search
- Table and thumbnail viewer
Version 2.24 (Mar 31, 2010)
Font Sleuth 2 4 4 – Font Browser And Organizer Pdf
Minor bug fixes (HFS directories). See the CHANGES.txt file for more details.
Version 2.23 (Feb 18, 2010)
Minor bug fixes (sorter issues). See the CHANGES.txt file for more details.
Version 2.22 (Jan 13, 2010)
Minor bug fixes and updates. See the CHANGES.txt file for more details.
Version 2.21 (Feb 2, 2009)
Minor bug fixes.
Version 2.20 (Oct 19, 2008)
This release contains minor feature upgrades to maintian compatability with TSK 3.0.0. TSK 3.0.0 has new tools, flags, and better handling and viewing of deleted files.
If you are one of those people who work with fonts on regular basis, then choosing, comparing and analyzing fonts is a serious business for you. Font management is not always as easy as a walk on the cake. Font management issues like installing and uninstalling fonts, handling missing fonts, taking care of font conflicts always keep graphic designers and typographers on their toes.
Also hundreds or thousands of fonts activated on the system can use up considerable amount of system resources which in turn reduces efficiency and productivity. Mac, Windows and Linux platforms have their own font management utilities, but these utilities are not sufficient in a specialized or professional environment. This is where professional font management tools come to the rescue.
You may want to check out the following related articles:
Below we have reviewed 25 free/commercial font managers for Mac, Windows and Linux. Which one do you use and why? Your favourite tool is missing? Let us know in the comments!
Suitcase (Win) / Suitcase Fusion (Mac)
Suitcase Fusion (Mac) and Suitcase (Win) are powerful, quick and clever font managers which have a simple and an intuitive user interface.
While previous versions of Suitcase created a database of information about your fonts, the fonts remained in their original location. You still have this option in Suitcase Fusion but also have the option to collect your fonts in a structured and secure repository called the Font Vault. The Font Vault gives users much more control over their fonts, eliminating unnecessary font conflicts, duplicate font issues and providing easy access to your own library.
Suitcase ensures you have the exact version of the font you need and prevents potential font wrecks (due to missing or substituted fonts. It also keeps fonts in one, secure location – easy to find and back-up. It also offers auto-activation: only the fonts you need are activated when you open a document and deactivated when you close.
With both Suitcase Fusion and Suitcase for Windows you get FontDoctor. FontDoctor is a professional software tool that takes the work out of locating, diagnosing and repairing the most common font problems, so you can stay focused on the task at hand. Suitcase Fusion price starts at $99.95. Suitcase Fusion is for Mac and PC.
Main features:
- Easy-To-Use interface
- Organization with font sets
- Font previews
- Font Sense, the most advanced font matching technology available, that allows for a deep level of font analysis when identifying fonts for auto-activation using multiple criteria—font type, foundry, version, etc.
- Keeping font library secure and organized
- Font auto-activation
- Windows Vista compatible
- Powerful font diagnosis and repair
- Font Doctor (free with purchase)
Linotype FontExplorer X (Win / Mac, free)
What makes Linotype FontExplorer X really different, is the integration of an online store which lets you browse through fonts you are considering for purchasing. Hence, you can examine and compare fonts inside FontExplorer X's online store as if they were installed on your system. The tool combines font management, font sorting, font shopping and font discovery in one user-friendly interface.
You can organize your fonts using a library, folders, tags and smart sets. That makes it easy to find all typefaces from a certain foundry, all italics or all fonts tagged with a certain keyword.
Auto-activation enables you to you decide which applications may request fonts, and which may not. Plugins for popular DTP apps like Adobe InDesign, Adobe Illustrator and Quark XPress are available as well. You can examine the complete character set, inform yourself about the legal stuff or just see a few sample paragraphs to know what a font looks like in real-life context.
Finally, you can enable/disable fonts, clear font caches, have a typeface family view, export font information as image/zip/disk image, missing font handling, document font scanner and Growl support. Supported languages are currently English and German. Linotype FontExplorer X is free. The
- Powerful font management
- Built-in online store
- Auto-activation
- System integration (Spotlight support)
- Missing font handling (system-wide auto-activation of fonts)
- Conflict Handling
- Document font scanner
- Growl support
MasterJuggler (Mac)
- Drag'n'drop support
- Support of PostScript, TrueType, OpenType and bitmap fonts
- Font management via drag'n'drop
- You can store and access fonts anywhere
- Organize fonts in custom sets
- Activate fonts either temporarily or permanently
- Preview multiple fonts and sizes with full Unicode support
- Glyph maps
- Examine fonts for corruption with the integrated Font Guardian
- Automate your workflow with AppleScript support
Font Safari (Mac)
FontCard (Mac)
- View third party font collections
- View the Font Panel with each font displayed using its own typeface (WYSIWYG Font Menu)
- Reveal the font in the Finder from the menu
- View font collections in the Font menu
- View previews of inactive fonts contained in third party font sets directly from the font menu
- Mark and reveal duplicate fonts;
- Easy to configure as it comes in usual Preference Pane form, accessible through System Preferences.
Font Pilot (Mac)
FontAgent Pro 4 (Mac)
Font Sleuth 2 4 4 – Font Browser And Organizer Download
- View fonts in Player, Compare, Waterfall and Data views
- Activate and deactivate fonts automatically or manually
- Share font specimens and sample books
- Create nested sets for projects and clients
- Store client fonts in separate libraries from your fonts
Fontcase (Mac)
- Unicode glyph table
- Smart collections using Bonjour
- Tagging and filtering fonts is easy
- Preview of both installed and non-installed fonts
Typograf (Win)
- View and preview fonts (OpenType, TrueType, Type1, Printer fonts, Raster or bitmap fonts)
- Displays all font properties
- Advanced tool for comparing fonts
- Print fonts and specimens
- Font management
- Manage fonts in database and font groups
- TrueType and Type 1 References, Typeface classifications
Font Sleuth 2 4 4 – Font Browser And Organizer Word
FontExpert 2007 (Win)
Apart from a usual suite of font management features, FontExpert 2007 offers you the ability to assign keywords, categories, ratings and captions in the tags view, print fonts, search for duplicates and corrupted fonts as well as examine your system for font errors. Winzip 6 5 – mac edition of established compression utility. You can also export fonts to HTML (
- View and preview fonts (installed or stored on local drives)
- Assign tags, ratings and categories to fonts
- Search for duplicates and corrupted fonts
- Organize fonts in groups (sets)
- Activate and deactivate groups of fonts with one click
- Print character maps of selected fonts; you can generate templates with page headers and footers manually
- Examine your system for font errors
- Export to HTML
- Automatic activation of missing fonts (includes Missing Fonts Loader plug-in for Adobe InDesign CS2 and Adobe InDesign CS3)
- Windows Shell Extensions (adds font management capabilities to the shell so it is easy to activate or print any font in a folder you browse in Windows Explorer)
Advanced Font Viewer (Win)
Opcion (Win / Mac / Solaris / Linux, free)
Font Frenzy (Win, free)
- Save a snapshot of your fonts folder that you can use as a restore point
- Re-install fonts quickly and easily from a previous snapshot
- View your font list at any point-size using a customizable test phrase
- View a sample of each font in a pop-up window including every upper- and lower-case character and numbers
- User-friendly font manager allows you to add new fonts, delete, or unload and store selected fonts
- View all fonts from a specified folder.
Font Xplorer (Win, free)
- Browse both installed and not installed TrueType fonts from disk
- Print pre-designed, professional sample sheets and font listings
- Filter fonts by character set
- Integrated Repair Wizard solves most common problems with fonts
- Extensive support for calling external programs. Plus support for different variables in callable command lines
MainType (Win)
- Install, uninstall, load and unload fonts
- Preview and browse fonts on any drive or directory without installation
- Full Unicode support
- Character grid with Unicode block navigation
- Print and print preview your fonts
- Support all popular font formats and more: TrueType, OpenType, TrueType Collections, Postscript Type 1, Vector and Raster fonts
- Drag and drop support
- Font export wizard generates a HTML-based overview of all your fonts
The Font Thing (Win, free)
AMP Font Viewer 3.82 (Win, free)
- Support for TrueType, OpenType and Type1 fonts
- Installation of fonts from a folder (one by one or from a list)
- Installation of fonts temporally (until the program is closed)
- Several options for organizing fonts in categories and managing fonts
- Printing a list of all or some of the installed fonts with examples
- Scratchpad area for testing the look of any font (installed or from a folder)
Cfontpro (Win, free)
- Powerful font engine
- Printing proof sheets
- Export to HTML and RTF
- Enhanced Property Viewer
- Advanced character map and character magnifier
- Portable font packager
- Font management
Worth mentioning
Fontmatrix (Linux, free)Fontmatrix is a general font management tool which is licensed under GPL. Standard features such as previewing fonts, installing and uninstalling them as well etc. are available. Good choice for Linux users. Series 2000.
Font Showcase (Mac)A very handy utility if you've got too many fonts to remember just what each looks like, and also allows you to print out a catalog of your font collection. You no longer have to install the fonts before you can view and print them. It features basic viewing, font printing, font peek, slide show, FontStream, character view, and font panes.
Font Wrangler (Win)Font Wrangler will allow you to install and remove TrueType fonts in batches; preview fonts before you install them; browse downloaded font files and view font copyright information. You can also print a ‘contact sheet' of fonts so you'll have a paper reference of what each font looks like and change your font names to make them more easily remembered and 1to resolve typeface name conflicts. Price: $24.99. A trial-version is available.
