Starting with tag: [TAG PyFlag0.87-pre1 scudette@users.sourceforge.net**20080905133052] [Updated build files to make a correct dist scudette@users.sf.net**20080905124503] [Fix for building on a 64 bit system. scudette@users.sf.net**20080905235254] [Added a dont descend directive to ensure the registry does not descend into the urwid directory. scudette@users.sf.net**20080906093449] [Fixed the CSV exporter to honor the limits and also export into a file attachment. scudette@users.sf.net**20080906100659] [Added a Galley exporter. Improved the Quick Annotation feature. Introduced a IPC method for Win32 notifications. scudette@users.sf.net**20080907093846] [A Few small bug fixes. scudette@users.sf.net**20080907104411] [Added the ability to tag and annotate many inodes at once (mass annotate). scudette@users.sf.net**20080908083253] [Added backward compatility for cache manager. scudette@gmail.com**20080908093949] [Implemented a database cache manager for periodic database refresh scudette@gmail.com**20080916022646] [Fixed a bug in pyaff to make it compile against both old and new versions of afflib. Lots of small bug fixes. Fixed path problems in windows version. scudette@users.sf.net**20080918002243] [Small bug in pyaff version checking code scudette@users.sf.net**20080921150438] [Fixed CSV log driver. scudette@users.sf.net**20080921234422] [Small bug fix for period intervals. scudette@users.sf.net**20080922231530] [Total breakage of gui was brought about by a firefox upgrade. scudette@users.sf.net**20080927070155] [Added volatility into tree. Added distorm into tree for disassembler support. Started rewriting the volatility windows integration. Implemented an SSDT parser which is nice with the disassembler. scudette@users.sf.net**20080927140013] [Fix Volatility integration to support crashdumps and hiberfiles again scudette@users.sf.net**20080928061714] [Updated the Im feeling lucky report to have a tree view - now there can be many precanned reports which are divided into logical tasks and we can really develop a work flow. scudette@users.sf.net**20080928103921] [Fixed a build issue with pyaff - better config time checking for libcrypto. Made a link to im feeling lucky on every page. scudette@users.sf.net**20080928134757] [Added another link dependancy for afflib scudette@users.sf.net**20080928141022] [Small patch to fix build issue with pyaff scudette@users.sf.net**20080930033229] [Fixed possible bug due to os.path.join being broken. scudette@users.sf.net**20081002132305] [Added a precanned report which shows the table inline (see graphics analysis) scudette@users.sf.net**20081003005256] [Added attachments for live 2.0 processing scudette@gmail.com**20081003022958] [removed warnings from geoip lookups scudette@gmail.com**20081003025324] [Fixed gui bug where tables in panes would open up in the main windows when sorted. Added pstree volatility plugin. scudette@users.sf.net**20081003141307] [Fixed a bug in HTML table export. Converted MSN to new precanned infrastructure. scudette@users.sf.net**20081008235541] [Small bug fix scudette@users.sf.net**20081009000040] [Changed the DB backend from pooled to single connection - Most mysql experts claim that pooled connections are not needed with mysql. Also changed default cursor type from server side to client side. scudette@users.sf.net**20081009060917] [ Fix minor bug with html export which caused PF to treat the end_row variable literally (it defaults to 0 so it didnt export any rows) scudette@users.sf.net**20081010002051] [Started implementing the new graphing facility using python-matplotlib scudette@gmail.com**20081010073713] [A possible fix for a possible race condition in db handling. scudette@users.sf.net**20081010234422] [Changes stream reassembler to keep track of udp streams as well. This is useful for detecting VPNs or voip communications. scudette@users.sf.net**20081011062635] [Few bug fixes with the new DB connection scheme. Periodic sql cache mode does not expire queries now. scudette@users.sf.net**20081019052316] [Fixed a bug which prevented PF from reloading config from the GUI. scudette@users.sf.net**20081029092753] [Fix for AFF driver. scudette@users.sf.net**20081104121451] [Fixed minor bug in Simple Log driver which stopped columns from being ignored. scudette@users.sf.net**20081110034533] [More work on SIP scanner scudette@users.sf.net**20081111015108] [Fixed up IECache handling - so now we have nice html rendering with IE cache entries just like we used to with mozilla. scudette@users.sf.net**20081111072623] [Updated udp streams to have a psuedo sequence number - this makes the combined streams work. scudette@users.sf.net**20081111233210] [Fixed bug in mounted fs driver. Other minor bug fixes. scudette@users.sf.net**20081112133405] [Implemented a consolidated cache manager - so small file storage is now more efficient as they all get lumped into the same cache file. scudette@users.sf.net**20081113233932] [Removed old libpst and added new libpst version. scudette@users.sf.net**20081116124955] [Reworked PST scanner to just shell out to readpst. RFC2822 scanner is not able to parse mbox format. scudette@users.sf.net**20081116125014] [Fixed scan FS report to pre-populate the current path in the dialog. scudette@users.sf.net**20081120015135] [Added an automated check for the schema against the CaseTable definitions on startup for automated upgrading of the schema in old cases. Added a new HTTP parse by tld report to rapidly find tlds of interest. scudette@users.sf.net**20081122141643] [Changed volatility plugin class definition to allow different output options. scudette@users.sf.net**20081127103458] [Minor bug fixes. Added google search precanned query. scudette@users.sf.net**20081127105855] [Added a new precanned report for http tlds. scudette@gmail.com**20081127112812] [Added a scanner to process Gmail image search pages. scudette@users.sf.net**20081128015852] [Updated Google Image scanner to reset the inode_ids in the http tables to refer to the newly rendered page. scudette@users.sf.net**20081128021949] [Fixed CSVExport to include the inode number scudette@users.sf.net**20081129061526] [Fixed bug in db schema check which stopped pf from starting without a default db. scudette@users.sf.net**20081201093535] [fix file magic detection on ubuntu 8.10 intrepid davico@tpg.com.au**20081201103607 The check is still potentially fragile. perhaps there's a better way? ] [Fixes for VolatilityLinux to make it work with dfrws challenge again. scudette@users.sf.net**20081201104707] [Introduced a recent mode where its possible to look at recent inodes only. scudette@users.sf.net**20081208132743] [Mozilla cache scanner now has unit test - adds http parameters to tables as well. HTTP urls are stored in normalised form (not sure if this is correct). scudette@users.sf.net**20081225144532] [Updated IECache browser to always create new VFS inodes for the cache files to fix a race condition with scanning. scudette@users.sf.net**20081225154518] [Fixed DB handling for binary data again (binary and unicode dont like each other). Lots of bug fixes. scudette@users.sf.net**20081228135948] [Small bug fixes to nsrl loader script to make it work again scudette@gmail.com**20081228143309] [Fixed the nsrl database creation to default to utf8. scudette@users.sf.net**20081229061414] [Lots of bug fixes to pass unit tests scudette@gmail.com**20081229153920] [Fixed a possible race condition in cache manager. scudette@users.sf.net**20081229232217] [Added a prelimenary RAID IO source implementation. scudette@users.sf.net**20081230143353] [Added an interactive raid map editor to allow users to calculate the appropriate raid map. scudette@users.sf.net**20081231150720] [Added some more error checking for Raid GUI scudette@users.sf.net**20081231152207] [Added some presents to raid IO Source with a library of parity maps. Also now we can swap file order from the GUI to make the map fit the files easily. scudette@users.sf.net**20090101023621] [Added unit tests for RAID. Found a bug in Hash scanner. scudette@users.sf.net**20090101074211] [Fixed a big in test_repo.py that would not allow it to work in current directory. scudette@users.sf.net**20090101081129] [Fixed javascript bug. Update dictionary table view on adding new words. scudette@users.sf.net**20090104231655] [Small bug fix for popup refreshing on post. scudette@users.sf.net**20090105224831]