IsoBuster 4.6

[tarekma7]

IsoBuster 4.6 released!

June 22, 2020

Check out the many improvements and new functionality, such as on the fly dealing with a particular type of write corruption on SD cards (USBC file corruption), support for large NTFS clusters, various speed improvements etc.

As usual there is plenty more but I'll let below list do the talking:

Changes / New:

Support for NTFS cluster sizes of 128 KB and higher. Since Windows 10 v1709 and Windows Server 2019 the older maximum 64 KB boundary has been increased to 2 MB, so changes needed to be made
Support for multiple NTFS MFT records in a single sector
Faster extraction and cloning, depending on write and read speeds but obviously still limited by the read speed on failing media or devices
Work-around for a certain type of data corruption that appears to happen frequently using certain USB card readers (internal and external). Symptoms are the sudden loss of files and or partitions etc. Usually in combination with FAT. Remaining files and/or folders may get names such as "USBC◘╧è◘" or "USBC..". Possibly related to ADATA NH92 adaptors though that is not certain! After researching the issue online it seems a lot of people think this is a virus. I see mention of the "USBC virus" and "USBC malware", yet it's not. It's a hardware / firmware failure that happened while data was being written to the SD card. IsoBuster is now able to detect and compensate for such issues on the fly so that files and folders can still be found and extracted
IsoBuster now displays the average speed when extracting
Support for ISO9660 and its derivatives, Joliet, Rock Ridge etc. mistakenly copied/cloned to a USB stick with 512 bytes per block
Right-Mouse-Click when holding SHIFT adds the option to work on a range (From-To) when doing a -Surface Scan- or -Scan for missing files and folders [Professional license]- or -List erroneous sectors-
Right-Mouse-Click when holding SHIFT adds the option to create a managed image file or clone that is [Empty]. No actual reading is done yet and the user has full control over which type completion is to be performed or what type of engineering is to be done [Professional license]
Right-Mouse-Click when holding SHIFT adds the option to show the Sector View dialog with the object's last LBA instead of its first LBA

Improvements:

Various speed and memory improvements when parsing NTFS
Various speed and memory improvements when parsing Brother-FAT and FAT
Various speed and memory improvements when parsing ISO9660 and its derivatives, Joliet, Rock Ridge etc.
Various speed and memory improvements when parsing the Pioneer DVR file system
Improved FAT parsing when only the backup boot sector is available
Both FAT addresses are shown in the FAT File system properties dialog (if there are two FATs)
Improvements in the 'debug dump' image file functionality. Activated when contacted to try and debug an issue
The search-suggestions-drop-down now displays under the search control instead of to the right of it, very much like previous-search-commands
An object (for instance file) with no size (0 bytes) cannot have unreadable sectors (so it should not be listed as such, even if its address is in unreadable space)
Improved support for old style Macintosh Partition maps
Better file signature detection of quick time formats: mp4, mov, 3gp, 3g2, m4a, m4b, m4p, m4v during a scan for missing files and folders
Improved file signature detection and assembly of fragmented *.avi files
Improved *.swf, *.wmf, *.pxc, *.exe, *.dwg and *.ico file signature detection (less chance of false positives)
Added file signature detection for: *.alb, *.pwm, *.pwp, *.amr
Added more shortcuts, Ctrl+ and Crtl-, to read and show sectors in Sector View
Also allow the creation of a customizable file system from a single track session or a single partition USB/HDD/SSD
TreeView now does 'hot tracking' when hovering over objects
Better internal click and right click management when making further selections afterwards, e.g. search
Changed the layout of the right-mouse-click popups to hopefully make more sense (may need a small adjustment when you're used to the old layout)
Dynamically create right-mouse-click popups to allow much more flexibility in the future
Plenty of other improvements, quite a few changes and re-writes in the core code / engine, as this is a living project and to deal with the ever growing new functionality
Various other GUI improvements

Fixes:

No known, reported or encountered bugs .. so nothing needed to be fixed

SOURCE

Homepage: 
https://www.isobuster.com/

Download:
https://www.isobuster.com/download.php

[Mohammad.Poorya]

IsoBuster 4.7 Build 4.7.0.0 – Final


Changelog for v4.7:



Changes / New:

• Implemented an option to not automatically explore a drive for partitions and file systems, to avoid reading until the operator choses so (Ignored on image files and needs a Professional license)
  
• Retries can be reduced to 0 retries (including the block per block retries)
  
• Added detection of encrypted partitions and tracks based on the encryption signatures for: WinMagic SecureDoc Full Disk Encryption, BitLocker, Apple File Vault, Check Point Full Disk Encryption, GuardianEdge Encryption Plus/Anywhere/Hard Disk Encryption and Symantec Endpoint Encryption, McAfee Safeboot/Endpoint Encryption, Sophos Safeguard Enterprise and Safeguard Easy, Symantec PGP Whole Disk Encryption (an encrypted partition or session/track is shown with a green color - it is also indicative for why no files and folders were found for such a partition or session/track)
  
• Ability to Export and Import report templates (*.ibtmpl) (via right mouse click, see under the actual reporting)
  
• Full Padus DiscJuggler *.cdi image file support, including CD-Text, via the Padus pfctoc.dll that is installed together with this version of IsoBuster
  
• Options / GUI / Shell option to choose your own 'Investigate with IsoBuster' text on right mouse clicking a CD/DVD drive in Windows Explorer
  
• Ability to Scan for missing files and folders but look for *.VOB Video only, via right mouse click + Shift + Ctrl
  
• Support for the PS2 Memory Card file system
  
• Support for the PSX Memory Card file system
  
• Support for the Dreamcast Memory Card file system
  
• Detect Xbox formatted Hard Disks and support Xbox native partitioning schemes to reach its file systems and stored data
  
• Detect PS2 formatted Hard Disks and support its native APA partitioning scheme to reach its file systems and stored data
  
• Detect the PS2 PFS file system
  
• Support for CD *.vcd image files
  
• Support for raw CD *.2056, *.2324, *.2332, *.2336, *.2352, *.2368, *.2448 image files
  
• Support for GD-ROM *.gdi image files
  
• Support for various other block device image files: *.xgd, *.apa, *.ps2, *.vm2; *.vmc, *.saveram, *.ddf, *.gme, *.mcd, *.mci, *.ps, *.psm, *.srm, *.vgs, *.vmp, *.vm1, *.mcr, *.dcm, *.vmu, *.hfv, *.528
  

Improvements:

• Greatly improved Prassi PrimoDVD / Sonic / Roxio *.gi image file support by finding internal sections and tracks
  
• Default RAW extracted CD Images now always get extension *.bin (instead of *.iso)
  
• Improved support for 512 + 16 ECC bytes per block Image files
  
• Changed the default optical disc retry counts from Per-Range: 2 and Per-Block: 3 to Per-Range: 1 and Per-Block: 2
  
• Improved the ability to clone an image with different internal blocksize than the device's blocksize
  
• Small improvement in Reiser file system detection
  
• Improvements detecting Xbox' FATX
  
• Show PS2 APA Attributes/Resources
  
• Ability to recognize and list ISO images in the application area of a PS2/APA partition
  
• Check the third track of a GD-ROM for the ISO9660 file system
  
• Improvement to search functionality and particularly searching inside (what I call) Embedded objects (for instance sub-partitions in partitions)
  
• Show files in the breadcrumb control when their content is shown (streams, extents etc)
  
• Show 'state icons' in the breadcrumb control when 'special' object members are shown, for instance streams, extents etc.
  
• Show wait cursor while loading (large) files into the EditWindow
  
• Show Search results breadcrumb with the full system name where the search originated
  
• Improved looking for a UDF 'VAT' in image files
  
• Default, VOB files are not cut into smaller 1GB pieces anymore (everybody runs NTFS now that can deal with larger files)
  
• If all tracks of a session are detected as encrypted, the session is regarded encrypted as well
  
• If all sessions of a CD/DVD are detected as encrypted, the disc is regarded encrypted as well
  
• Work around a W10 issue (via the installation) that seems to elevate 'Investigate with IsoBuster' to the default setting sometimes
  
• Before a device is automatically removed (e.g. disconnected or device electronics failure) IsoBuster asks to save the scan results
  
• Custom file signature scanning now pre-processes the lines for much faster searching
  
• A few demo Custom file signature scanning *.rules are now installed in the /Plugins/ folder, so that it's easier to understand, edit, test and use
  
• Custom file signature scanning now also supports commands: \%, \i(), \e() and \c()
  
• Plenty of other improvements, quite a few changes and re-writes in the core code / engine, as this is a living project and to deal with the ever growing new functionality
  
• Various other GUI improvements
  

Fixes:

• Fixed it so that command line parameter /efig works again (It looks like this was broken since v 3.6)
  
• Fixed exception error that could occur when one clicks the forward history button when there is nothing to show
  
• Fixed it so that text is displayed again in ListView (on an empty folder or unknown file system or on a partition without file system(s) etc.)
  
• Fixed it so that if only the last sector in a range is bad, building an error list From-To is still done correctly