SOFTWARE UPDATES
Download the latest version of software below.
RECON ITR Version 1.3.0
We’re pleased to announce major imaging updates to the RECON ITR! This update brings a variety of enhancements, improved usability, and important bug fixes to streamline your forensic imaging workflows.
Enhanced Disk Management and Imaging
- Improved Debug Log Export
- Easily export debug logs directly from the disk imager screen when in debug mode, making troubleshooting more efficient.
- Quick Mount/Unmount Options
- New buttons for "Mount-R", "Mount-RW", and "Unmount" are now available on the Disk Manager screen for faster drive management.
- Smarter Decryption
- The Decrypt password prompt screen now remains open after an incorrect password entry, allowing for multiple attempts without re-initiating the process.
- Optimized Column Widths
- The "NAME" column in the Disk Manager now has an increased default width to better display system default volume names.
- New Disk Imager Filter
- A new filter button in Disk Imager allows you to toggle between "Show All" sources on the device or "Show Suggested" sources for a more focused view.
- APFS Image Formatting
- DMGs and SparseImages of APFS Volumes will now automatically be internally formatted as APFS, ensuring consistency and proper handling.
Usability Tweaks and Improvements
- Clear Source Identification
- Source dropdowns now include identifiers to mark whether a disk is internal or external.
- Intuitive Source Selection
- The source dropdown now prioritizes the most relevant disks. The Data Volume is highlighted in Green, and LOCKED volumes are marked in Red, indicating they must be unlocked before imaging.
- Accurate APFS Volume Sizing
- APFS Volumes in the Disk Manager and source dropdown now accurately display their currently used size rather than the container size.
- Refined UI for Disk Manager & Free Space
- Enjoy a more consistent and user-friendly interface with minor improvements to text formatting, display, and the coloring scheme in Disk Manager. This new coloring helps you quickly identify disks of interest:
- Red: Mounted Read/Write
- Green: Mounted Read/Only
- Dark Gray: Parent Disk
- Orange: Primary APFS Container
- Improved Notification Messages
- Container imaging failure messages now provide a recommendation to target the APFS Data Volume, offering clearer guidance.
- ExFAT Destination Clarity
- ExFAT drives are now listed in the Destination Drive list, but are marked in red with an "ExFAT not supported" notice to prevent confusion.
- Streamlined Source/Destination Options
- We've removed the System volume from the default disk imager source dropdown, deprecated RAM Imager from bootable imagers, and removed internal bootable RECON volumes from the destination dropdown to provide more relevant options.
Key Bug Fixes
- Resolved an issue where Logical Imager wasn't checking the size of a destination drive before writing data to a logical folder.
- Fixed a crash that occurred when pressing the "Free Space" button in Disk Manager.
- Addressed an issue where internal source volumes failed to mount on Intel-based Macs.
- Corrected a bug where the "Format" button in Disk Manager was enabled for APFS volumes.
- Fixed an issue where "Destination Image Hash" was still shown for logical folder images.
- Resolved a bug preventing files from being added to the imaging bucket with the Logical Imager in a live environment.
- Fixed inaccuracies where Free Size and Used Size were displayed incorrectly for APFS volumes.
- Addressed a bug where booting to SONOMA on a T2 Intel device would lead to a boot-loop or the onboard macOS login screen.
Need help or want to chat about these new features? We’re happy to talk to you!
Email: hello@sumuri.com Phone: +1 302.570.0015
