MetaDiver changelog v3.4.0.2660 -ui improvements and tweaks to Review -new: Review windows filter on field from 'metadata' field list -added email folder counts to processed log -improved/added outlook redemption PR_ header mappings -improved debug logging -fixed error log config issue -bug fixes v3.3.0 -Review window: copy list of values from left pane -Review window: copy counts by value from left pane (nom nom). This pulls all grouped values from the table not just what is shown in the filtered window. -If the new filtering gets slow on a large lists let me know and I’ll tweak the threading. -Upgrade Tika to 1.21 (from version 1.19.1) -Upgrade IKVM.WINWARD to 8.5.0.3 -Update outlook redemption email support to 5.20.0.5298 -Update DocumentFormat.Openxml to 2.9.1 -Update SQLite.Core to 1.0.110 -Remove dependency for SharpZip -Add references to the licenses for open source libraries -Improved UI threading -New checkbox in Review to remove empty lines and white spaces in Tika Strings content. This will help responsiveness. If you want cleaner text then check the box under “Action” and behold fewer new lines. -Additional Tika internals enumeration -Update Zimmerman dll's for LNK, Jumplist and ExtensionBlock to May 1st commit -Various other improvements v3.2.0 -Upgrade libraries to .NET 4.6.2 -Implement Eric Zimmermans Lnk and Jumplist libraries for reading windows Shortcuts replaces Shellify v3.1.2 (build 1635) -bugfix to button for mapping gps for pictures -update settings mapping db default templates -remove old "Type" column mapping from shortcuts -add tika check to debug.log for no metadata from file and removed error on individual elements not having value that was meant for debugging. v3.1.1 (build 1623) -bugfixes to paging in Review window -fix to keyword search not pulling back hits in some cases -prevent empty line in keywords on save -performance optimizations -resized evidence path window on process form -bugfixes v3.1.0 (build 1620) -check for update ui change -package update for ElastSearch.Net 5.4, DocumentFormat.OpenXML, AlphaFS 2.1.3 -fix case info form fields not saving v3.1.0 (build 1602) -upgrade outlook redemption from 5.10.0.4312 to 5.14.0.4798 -fixes minor issues with filtering -preview email fixed when column profile changed from summary -fixed temp directory issue when cleaning it up. -fix keyword search issue with switch to generics -fix sorting of dropdown on review window -review window - metadata fields now uses 3rd party control for better look and feel -review window - metadata fields now show all fields every time you select a row -udpated filterlist for filtering by specific extensions on intake -renamed about to ? and reated submenu's from menu bar -added feedback option from ? menu item -change parser mapping to x-parsed-by for openofficexml docs and email msg via redemption -updated SQLite Core to 1.0.105.1 -bug fixes v3.0.1 (build 1588) -improved tika handling with task timeout -fixed handling for tika hang/bug on rotten officexml docs -added back the fallback to ms openxml document mapping when tika hangs on faulty officexml format -added back the fallback to ms openxml document mapping when tika fails to parse officexml format -memory leak fixed -change lnk file parser info field mapping to "x-parsed-by" from "parsed" -improved tika metadata parsing -added new metadata field mappings -keywords run save to caseinfo.json file -intake path's save to caseinfo.json file -bugfixes v3.0.0. (build 1583) - beta -added Keyword search during processing -added 3rd party UI controls for better user experience when reviewing metadata -total rewrite of the processing engine. I've clocked it against a raid1 at 380 MB/s -replaced logging with apache log4net -removed dependency on win32 shell for item type -tika known globs (mime types) are processed by default and other unknown file types are not fed to tika unless user requests it. -added picture review in review window -added gps exif review in the new picture tab in review window -various bug fixes and other enhancements v2.5.0 -new: Column mapping editor allows you to build your own column profiles -new: Selected column profile from export window -new: "select all" added to grid -new: filter by double clicking a grid cell -fix status bar on hex and binary strings screens. -culling columns is now optional -various improvments to UI of Review form -fixed email mapping for message last modified time -added check for path's longer than 255 when selecting case path -When exporting you can now choose the profile of columns you want to export to a file -cleanup of export dialogue -3rd party rich ui controls added to review window (adds size to the distribution) -misc bug fixes v2.4.0 -added: copy cell contents in datagrid -added: log window browse log folder -added: update notification in status bar -updated: bstrings to latest that can account for strings across sector boundaries -added: when viewing tika strings of a email from a PST tika now shows just the selected message. -fix: check for update bugfixes -gui fixes and changes -various bug fixes v2.3.0 -Review: added Hex viewer -Review: added binary strings viewer -Review: added column filter by group -Review: added open file and open file location -removed expiration from MetaDiver -email processing: updated dll's resolve outlook 2016 mapi bugs -bugfixes v2.2.1 -sqlite db handling improvements -ui improvements -bug fixes v2.2.0 -New look and feel on main screen. -Case Info added and persists. -Case Settings cleaned up. -various bugfixes and enhancements. v2.1.9 -Elastic Search indexing added. -Tika support added. -Review window: Document Strings view using Tika. -Tika instead of Shell for file metadata for other files (files without specific parsers). -Tika now default for open office, .url, .exe and all misc types. -Tika is now fallback for .msg, .eml and .emlx when outlook not installed or cdo not an option. -Tika also gets used for other graphics/media files such as .tiff, .nef, .png and .gif, .mp3, .mp4, etc... v2.1.8 -lnk file mapping refactoring. added drive type. -email: last verb mapping fix. -email: debug option for dumping full message mapitags in json. -email: rewrite addresess list output. -processing now updates total count with compound file items (psts, archives, jumplists) -processlog output fix. -various bugfixes and enhancements. v2.1.7 -bug fixes to enumeration values affecting pst, archives and jumplists. -Case Path dialogue now allows pasting path v2.1.6 -bug fixes to email mappings v2.1.5 bug fix for lnk file unescaped backslash at end of path remove popup on outlook bitness mismatch with metadiver. moved to status bar v2.1.4 minor bug fixes v2.1.3 -bug fix for outlook bitness detection v2.1.2 -bugfix for hashing options v2.1.1 Beta -Backend rewrite to SQLite -Email header support added: MSG, PST, EML, EMLX. -Email extended MAPI added - some extended mapi header information being added -Legacy office doc's '97-2003 support -Windows shortcut parsing LNK and Jumplists enumeration -Archive enumeration (zip, 7z, arj, rar, gzip, bzip2, iso, vhd, vhdx, vmdk, cab) -Command line version (basic functionality) -Improvements to error handling when file permission denied (Users like to select the entire partition, click and forget...) -Datagrid large dataset support using paging. -openxml office mapping bug fixes -exif: bug fixes -exif: user comments decoding added -logging rewrite -fixes for IO handling reparse and permission denied when reading full drive. -Review form: panel's are now sizeable -Review form: column width's are remembered -Case path added -UI improvments -various bug fixes v.2.0.1 Alpha 2 Bug Fixes -crash on computers without "Microsoft.VisualBasic.PowerPacks.Vs" installed. Resolves Server 2008 crash. -cleaned up some dll version mismatches and dependency issues. -Various minor fixes. v.2.0.0 Alpha GUI - look and feel improvements. GUI - progress now in main window. You can still use Status Window. GUI - Rewrite of Extension Filter. Still needs work... Rewrite of the core for better code maintainability. Error handling improvements. Try try catch catch... finally. File Props - Grabbing UTC times for file system rather than shell. You can turn localtime values as well but off by default. Office 2007+ Docs - Direct support added. Wrote a handler for xml based docs using Open XML. Open Office Docs - Direct support added. Wrote a handler for xml based docs using Open XML. PDF - Dropped old core. PDF - Replaced handler with pdf clown.net. PDF - Complete rewrite PDF - Grab's magic number as string ZIP - Added support for archive files such as zip, 7zip, arj, rar, cab, iso etc.. using SevenZip Columns - Better culling of empty columns. Review window - Now Enabled (Only supports a max of 10,000 records for now). Just export to file if you have more. Review window - Can filter data dynamically by column. Review window - Can export filtered views. Exports - Better naming and handling. Hashing - bug fixes in preventing file locks. Replaced - Dumped old XLSX library for Open XML. Much faster and no more corrupted reports! Dropped - ExifLib in favor of Shell32 for now due to major bugs in ExifLib. Image Mounting using Arsenal Image Mounter (Raw, E01, vhd, vmdk)- Pretty buggy!! (Use with care. Backup your work first...just saying). This is a trial run... #Working on fully documenting credits for open source projects, working on it for gold release. On the way (pro) #pst, msg handling #archive expansion (expand child objects from zip, iso, msg..) #case info, case path, database to write case records and retrieve. #review window handling more than 10k records. #reports #shadow copy previous revisions #more that i can't remember... That's all I can remember right now... More later. v1.2.1 Fixes -auto open after export has been fixed. -xlsx output now uses Open XML. This hopefully resolves corrupted xlsx output format issues and any possible future licensing issues. New -SQLite output. v1.2 Beta In this build major interface enhancements. The ability to choose multiple file extension filters before processing. Review window has been enhanced to allow you to select a column and search for text. Generic processing options that won't change often have been moved off the main form for better screen real estate. New: Review form can now filter by column! New: logging, added machine name and app version for easier debugging. New: Column "Last Author" added. Some .doc files have this field. Other: Shell: field names are now done with case insensitivity. don't think there was an issue but this reduced possibility of one. Other: minor ui change to exif/gps checkbox description. Fix: error logging garbled text fixed. v1.1.1 Beta User option: you can skip using shell. User option: Choose to discover Shell columns not shown in MetaDiver. Full EXIF and GPS using ExifLib (http://www.nuget.org/packages/ExifLib). User option: File Hash List via "menubar->options->profiles". User option: Cancelling processing is now supported. Status window added. Exe is now self signed. Status window added. Progressbar works correctly and moved to status window. Moved "review" button to menubar->view->review. Bug fixes. Minor ui improvements. minor ui improvements #Known EXIF Duplication due to Shell and ExifLib providing some of the same image properites. Possible PDF column duplication if Adobe 8/9 shelldll is actually working (rare). You could see high memory usage on large data sets 40k plus files. Don't worry, it free's up next time you process stuff. Review will only show the first ten thousand records for practical reasons. v1.1.0 Beta PDF XMP MetaData is extracted as well as more information for Windows Shortcuts, and URL files. Nearly total rewrite for parallel threading making it much faster! User Interface has been improved. Option only extract Shell meta-data. File hashing has been added for MD5 and SHA1. XML and JSON export formats added. You can review before exporting using the “Review” button or just auto export. Option to show only certain file type by extension. A predefined list of fields (over 300) is now set allowing for re-ordering columns and assigning to certain file types in the future, etc… Check for new release in the About window. Lots of bug files. v1.0.5 -Implemented threading for better responsiveness. -UI reorganized to flow better. -UI changes for delimiter. v1.0.4 #Resolved -if folder has no subfolders it wouldn't find files properly. this has been fixed. -If there aren't any files with metadata in a folder or the folder is somehow invalid it just doesn't do anything... (Resolved i think?) v1.0.3 -fixed appending issue in csv output. -full path