OSForensics 11.1.1000

What's new in this version:

Auto Triage:
- Changed to try recovering BitLocker keys instead of just detecting BitLocker status

Drive Preparation:
- Fixed possible bug where if OSF failed to open drive the first time, the retries to open drive would fail as well

Event Log Viewer:
- Added decoded XML from details tab to general
- Renamed 'User' to 'User SID' to avoid confusion between other uses of 'User' in other modules
- User SID column will display some known Security IDs in addition to the SID
- Changed to now show -1 as the number of event log records if the event log is returning invalid log records
- Display 'Device Connected/Disconnected' in General tab for devices using DirectAccess

File Name Search:
- Added 'Website Files' pre-set
- Changed to allow resizing of config window for machines with low screen resolution

File Viewer:
- Entropy Tab, Added 'Scan @ VirusTotal.com' option which will upload the current file to VirusTotal and scan it
- Metadata Tab, Removed Date/Time and File Permissions Attributes from showing for files extracted to temp before running exiftool
- Updated the number case changes allowed in a word when using the Extract String function from 5 to 15

Hashing:
- Added ability to have more than one active Hash Database
- Added 'Add to existing hash set' option in Hash Selected Files window
- Added field to name Hash Database & Hash Set when creating Quick Hash
- Added Hash Database name to hash scan results

Indexing:
- Added ability to run selected files against active hash sets and create quick hash sets
- Changed to go to the first tab that has any results instead of last tab that has results
- Changed to default to most recently created index
- Fixed possible crash when going to the Search Index tab when case does not contain any existing indexes

Manage Case:
- Updated to save the last used custom case location, and use it for new cases
- Disabled 'Tagged Files' from automatic inclusion in the report

Mismatch Files Search:
- Added right-click option to save checked items to disk
- Fixed Browser Cache preset not working for images with multiple partitions
- Fixed Browser Cache scan not working on certain versions of Chrome

Passwords:
- Added Select Partition window to Windows Login Passwords tab
- Fixed Wi-Fi passwords not being decrypted
- Fixed possible stall when trying to decrypt NTFS encrypted files, OSF will now treat them as not supported, as the file is not readable
- Fixed recovered password hint not displaying
- Fixed UI elements being disabled if scan is cancelled in certain situations

System Information:
- Added 'System Clock' (Time Sync) setting under the Timezone Info (Registry)" section

User Activity:
- Website Logins, Added additional check for Firefox install location
- Fixed a potential crash when parsing the user's Master Key

Misc:
- Added new 'Report Bug' option to make reporting bugs for streamlined
- Updated to VolatilityWorkbench 3.0.1010
- Fixed reading data of compressed files with more than 1 non-sparse fragments in a compression unit