We missed our goal of a quarterly release, but we managed to get Autopsy 4.4.0 and TSK 4.4.1 out.
- Has a bunch of keyword search improvements, including better regular expression searching with spaces, better hit highlighting, and ability to edit keyword lists.
- New triage features, such as:
-- You can make a sparse VHD file when analyzing a local drive (USB) so that you don't need to acquire first. When your analysis is over, you'll have a VHD image of the drive! -- Ingest filters allow you to run the ingest modules only a subset of files during triage -- Ingest profiles allow you to pick an ingest filter and set of ingest modules to make it eaiser to preprogram for triage
- Lots of other changes and improvements to existing features.