Defraser is a forensic analysis application that can be used to detect full and partial multimedia files in datastreams. It is typically used to find (and restore) complete or partial audio/video files in datastreams (for instance, unallocated diskspace)
It is very useful in casework, and I have solved several cases by using Defraser.
This is an excellent product! Keep up the good work.
Release 0.5.0 ============= NEW - New MPEG-4 detector NEW - Uninstallation shortcut added NEW - Show progress bar during 'Send To' and 'Save As' NEW - Added menu options 'Save Project' and 'Save Project As' NEW - Show end offset in header tree view FIX - Deletion from workpad is very slow FIX - ExampleDetector project fails to compile FIX - Stream created by 3GPP detector are not correct FIX - MPEG-2 video incorrectly reported as MPEG-1 video FIX - Sorting on length fails FIX - Tree view not updated when one file scanned for the second time FIX - Audio stream in 3GPP file not found Release 0.4.4 ============= NEW - Detectors are now configurable, use the Project Properties menu while no files scanned NEW - Automatic detection of GOM-player and adding to 'Send To List' NEW - Show progress bar during 'Save As Separate Files' action NEW - Show progress bar during 'Save As Contiguous File' action CHG - Project files are now saved as a XML-file and from now on better interchangeable between versions of Defraser FIX - Show progress bar during 'Export To XML' FIX - Solved out-of-memory issue when scanning huge MPEG-1/2 video files FIX - Cancelling of scan now works FIX - Last pane configuration now kept correct after pressing Cancel in the Options dialog after using the Show/Hide panes buttons FIX - Remove file from the recent file list if the file was not found FIX - If a file was not found, show its name in the error message FIX - Exception when no file is selected in the 'Add File' dialog after pressing the 'Run'-button Release 0.4.3 ============= FIX - Solved out-of-memory exceptions caused by AVI and 3GPP detectors Release 0.4.2 ============= NEW - MPEG-4 detector: Time Increment Resolution is shown for Video Object Layer Header CHG - MPEG-4 detector: better parsing of H263 VOP's (parsing of PLUSPTYPE added; still not complete yet) FIX - MPEG-4 detector: not all VOP's were found FIX - MPEG-1 & 2 detector: PesPacket with stream ID==0xBE did create a new result when pes stream contains a value != 0xFF while the end of the header stops at start of next header FIX - Hex/Dec value of Offset and Length caption did not always display the correct value FIX - File not found exception was not caught when user clicked on stream in file tree after file has been removed FIX - If you want to build Defraser from code, you no longer need to remove the file 'licenses.licx' from the Visual Studio Solution file Release 0.4.1 ============= NEW - AVI detector added NEW - 3GPP 64 bit ChunkOffset atom added CHG - MPEG-1&2 detector starts a new result when the SystemClockReference is lower than the previous value or when there is a gap. FIX - Exception when adding a column to the Headers view from the Headers Details view while 'Auto Fit' is enabled FIX - New project is now always added to the Recent Projects menu option FIX - Sort order in Files view now on filename instead of path Release 0.4.0 ============= NEW - Conversion of the project files to Visual Studio 2008 FIX - 3GPP detector extended FIX - IsFullFile column removed from file tree FIX - Detector column added to file and header tree Release 0.3.6 ============= FIX - Send-to (external) or save-as in HeaderTree excludes children from the selected headers Release 0.3.5 ============= NEW - The project data is now serialized instead of stored in a SQL-database NEW - Cache is filled during scan NEW - Proper alignment of result attributes in tree view NEW - You can double click in the column chooser to add/remove items NEW - Save data from more that one file in the file tree NEW - Files for which no results are found are added to the Project NEW - timestamp data decoding (creation and modification) of mvhd, tkhd and mdhd atoms of all 3GP video and audio tracks FIX - Deletion of a file in the file tree now keeps the focus at the same line FIX - The application now displays a message when it gets out of memory FIX - MPEG-1 & 2 TimeCode is now formatted as specified by the specification Release 0.3.4 ============= FIX- MPEG2 fix to put subsequent group of picture headers in one data block when no start header is found FIX - MPEG2 fix to detect Slices when no start header is found NEW - QuickTime code added to parse the Elementary Stream Descriptor Release 0.3.3 ============= FIX - Results were sorted during 'Send To' and 'Save As' command, thus undoing user editing. CHG - In the last release you had to create your own strong name key file. The source now contains a dummy key. NEW - Update to VirtualTreeList 3.10.0 NEW - Update to NUnit 2.4.7 Release 0.3.2 ============= KNOWN ISSUE - Out of memory exception when scanning large files (>1GB) especially created by hard disk recorders NEW - Old Mpeg-1 & 2 detector removed NEW - New Mpeg 1 & 2 detector improved NEW - 3GPP/QuickTime detector now has descriptive names NEW - Possibility to add all meaningful headers details as column to the header view, otherwise grayed out NEW - Detectors now present the correct format (MPEG1/MPEG2/3GPP/MPEG4) NEW - Video format shown with datablock FIX - The MPEG-2 detector made it impossible for the MPEG-4 detector to do its job FIX - File scanner reports -50% progress fixed Release 0.3.1 ============= FIX - Fixed problem with order of items when copying to workpad FIX - Fixed problem in 'Send To' menu Release 0.3.0 ============= NEW - Redesign of architecture to handle container and codec data with different plug-ins NEW - Old MPEG 1 & 2 plug-in replaced by MPEG 1 & 2 container and codec plug-ins NEW - 3GPP container plug-in NEW - Send headers of selected type to work pad and player NEW - Save All Children functionality added NEW - Persist used columns per detector FIX - Fixed drag file to Defraser Window Release 0.2.7 ============= FIX - Send to <player> from work pad main menu FIX - Delete in work pad sorts items FIX - Unhandled exception while scanning MPEG-4 and clicking video data block FIX - No GUI updates after click on video data block NEW - Be able to add a file without first open or create a project NEW - recent projects and recent files Release 0.2.6 ============= CHG - Changed XtraTreeList for Virtual Tree Release 0.2.5 ============= FIX - MPEG 4 detector FIX - MPEG 1-2 detector FIX - Header detail view NEW - show progress during export to XML NEW - show use of shift key in status bar during drag to work pad Release 0.2.4 ============= NEW - MPEG4 metadata added FIX - Cancel of scan throwed exception FIX - Update of header detail view when first displayed FIX - Installation failed on some computers FIX - Drag to empty workpad failed FIX - License text added to about box FIX - Project created in non existing directory failed Release 0.2.3 ============= NEW - MPEG4 scanner added FIX - 'Send to <player>' bug fixed in Workpad Release 0.2.2 ============= NEW - Header detail view. CHG - Result tree view is now filled factor 13 faster. CHG - Argument 'hasChildren' removed from the method SaveResult of the IResultWriter interface. CHG - Methods in IResultWriter interface refactored to use objects instead of database ID's. Release 0.2.1 ============= FIX - MPEG 1&2 plug-in: false data blocks were detected; FIX - MPEG 1&2 plug-in: an exception was thrown for some mpeg files when using the GUI. Release 0.2.0 ============= First release on Source Forge
Release 0.5.0 ============= NEW - New MPEG-4 detector NEW - Uninstallation shortcut added NEW - Show progress bar during 'Send To' and 'Save As' NEW - Added menu options 'Save Project' and 'Save Project As' NEW - Show end offset in header tree view FIX - Deletion from workpad is very slow FIX - ExampleDetector project fails to compile FIX - Stream created by 3GPP detector are not correct FIX - MPEG-2 video incorrectly reported as MPEG-1 video FIX - Sorting on length fails FIX - Tree view not updated when one file scanned for the second time FIX - Audio stream in 3GPP file not found Release 0.4.4 ============= NEW - Detectors are now configurable, use the Project Properties menu while no files scanned NEW - Automatic detection of GOM-player and adding to 'Send To List' NEW - Show progress bar during 'Save As Separate Files' action NEW - Show progress bar during 'Save As Contiguous File' action CHG - Project files are now saved as a XML-file and from now on better interchangeable between versions of Defraser FIX - Show progress bar during 'Export To XML' FIX - Solved out-of-memory issue when scanning huge MPEG-1/2 video files FIX - Cancelling of scan now works FIX - Last pane configuration now kept correct after pressing Cancel in the Options dialog after using the Show/Hide panes buttons FIX - Remove file from the recent file list if the file was not found FIX - If a file was not found, show its name in the error message FIX - Exception when no file is selected in the 'Add File' dialog after pressing the 'Run'-button Release 0.4.3 ============= FIX - Solved out-of-memory exceptions caused by AVI and 3GPP detectors Release 0.4.2 ============= NEW - MPEG-4 detector: Time Increment Resolution is shown for Video Object Layer Header CHG - MPEG-4 detector: better parsing of H263 VOP's (parsing of PLUSPTYPE added; still not complete yet) FIX - MPEG-4 detector: not all VOP's were found FIX - MPEG-1 & 2 detector: PesPacket with stream ID==0xBE did create a new result when pes stream contains a value != 0xFF while the end of the header stops at start of next header FIX - Hex/Dec value of Offset and Length caption did not always display the correct value FIX - File not found exception was not caught when user clicked on stream in file tree after file has been removed FIX - If you want to build Defraser from code, you no longer need to remove the file 'licenses.licx' from the Visual Studio Solution file Release 0.4.1 ============= NEW - AVI detector added NEW - 3GPP 64 bit ChunkOffset atom added CHG - MPEG-1&2 detector starts a new result when the SystemClockReference is lower than the previous value or when there is a gap. FIX - Exception when adding a column to the Headers view from the Headers Details view while 'Auto Fit' is enabled FIX - New project is now always added to the Recent Projects menu option FIX - Sort order in Files view now on filename instead of path Release 0.4.0 ============= NEW - Conversion of the project files to Visual Studio 2008 FIX - 3GPP detector extended FIX - IsFullFile column removed from file tree FIX - Detector column added to file and header tree Release 0.3.6 ============= FIX - Send-to (external) or save-as in HeaderTree excludes children from the selected headers Release 0.3.5 ============= NEW - The project data is now serialized instead of stored in a SQL-database NEW - Cache is filled during scan NEW - Proper alignment of result attributes in tree view NEW - You can double click in the column chooser to add/remove items NEW - Save data from more that one file in the file tree NEW - Files for which no results are found are added to the Project NEW - timestamp data decoding (creation and modification) of mvhd, tkhd and mdhd atoms of all 3GP video and audio tracks FIX - Deletion of a file in the file tree now keeps the focus at the same line FIX - The application now displays a message when it gets out of memory FIX - MPEG-1 & 2 TimeCode is now formatted as specified by the specification Release 0.3.4 ============= FIX- MPEG2 fix to put subsequent group of picture headers in one data block when no start header is found FIX - MPEG2 fix to detect Slices when no start header is found NEW - QuickTime code added to parse the Elementary Stream Descriptor Release 0.3.3 ============= FIX - Results were sorted during 'Send To' and 'Save As' command, thus undoing user editing. CHG - In the last release you had to create your own strong name key file. The source now contains a dummy key. NEW - Update to VirtualTreeList 3.10.0 NEW - Update to NUnit 2.4.7 Release 0.3.2 ============= KNOWN ISSUE - Out of memory exception when scanning large files (>1GB) especially created by hard disk recorders NEW - Old Mpeg-1 & 2 detector removed NEW - New Mpeg 1 & 2 detector improved NEW - 3GPP/QuickTime detector now has descriptive names NEW - Possibility to add all meaningful headers details as column to the header view, otherwise grayed out NEW - Detectors now present the correct format (MPEG1/MPEG2/3GPP/MPEG4) NEW - Video format shown with datablock FIX - The MPEG-2 detector made it impossible for the MPEG-4 detector to do its job FIX - File scanner reports -50% progress fixed Release 0.3.1 ============= FIX - Fixed problem with order of items when copying to workpad FIX - Fixed problem in 'Send To' menu Release 0.3.0 ============= NEW - Redesign of architecture to handle container and codec data with different plug-ins NEW - Old MPEG 1 & 2 plug-in replaced by MPEG 1 & 2 container and codec plug-ins NEW - 3GPP container plug-in NEW - Send headers of selected type to work pad and player NEW - Save All Children functionality added NEW - Persist used columns per detector FIX - Fixed drag file to Defraser Window Release 0.2.7 ============= FIX - Send to <player> from work pad main menu FIX - Delete in work pad sorts items FIX - Unhandled exception while scanning MPEG-4 and clicking video data block FIX - No GUI updates after click on video data block NEW - Be able to add a file without first open or create a project NEW - recent projects and recent files Release 0.2.6 ============= CHG - Changed XtraTreeList for Virtual Tree Release 0.2.5 ============= FIX - MPEG 4 detector FIX - MPEG 1-2 detector FIX - Header detail view NEW - show progress during export to XML NEW - show use of shift key in status bar during drag to work pad Release 0.2.4 ============= NEW - MPEG4 metadata added FIX - Cancel of scan throwed exception FIX - Update of header detail view when first displayed FIX - Installation failed on some computers FIX - Drag to empty workpad failed FIX - License text added to about box FIX - Project created in non existing directory failed Release 0.2.3 ============= NEW - MPEG4 scanner added FIX - 'Send to <player>' bug fixed in Workpad Release 0.2.2 ============= NEW - Header detail view. CHG - Result tree view is now filled factor 13 faster. CHG - Argument 'hasChildren' removed from the method SaveResult of the IResultWriter interface. CHG - Methods in IResultWriter interface refactored to use objects instead of database ID's. Release 0.2.1 ============= FIX - MPEG 1&2 plug-in: false data blocks were detected; FIX - MPEG 1&2 plug-in: an exception was thrown for some mpeg files when using the GUI. Release 0.2.0 ============= First release on Source Forge
Release 0.4.3 ============= FIX - Solved out-of-memory exceptions caused by AVI and 3GPP detectors Release 0.4.2 ============= NEW - MPEG-4 detector: Time Increment Resolution is shown for Video Object Layer Header CHG - MPEG-4 detector: better parsing of H263 VOP's (parsing of PLUSPTYPE added; still not complete yet) FIX - MPEG-4 detector: not all VOP's were found FIX - MPEG-1 & 2 detector: PesPacket with stream ID==0xBE did create a new result when pes stream contains a value != 0xFF while the end of the header stops at start of next header FIX - Hex/Dec value of Offset and Length caption did not always display the correct value FIX - File not found exception was not caught when user clicked on stream in file tree after file has been removed FIX - If you want to build Defraser from code, you no longer need to remove the file 'licenses.licx' from the Visual Studio Solution file Release 0.4.1 ============= NEW - AVI detector added NEW - 3GPP 64 bit ChunkOffset atom added CHG - MPEG-1&2 detector starts a new result when the SystemClockReference is lower than the previous value or when there is a gap. FIX - Exception when adding a column to the Headers view from the Headers Details view while 'Auto Fit' is enabled FIX - New project is now always added to the Recent Projects menu option FIX - Sort order in Files view now on filename instead of path Release 0.4.0 ============= NEW - Conversion of the project files to Visual Studio 2008 FIX - 3GPP detector extended FIX - IsFullFile column removed from file tree FIX - Detector column added to file and header tree Release 0.3.6 ============= FIX - Send-to (external) or save-as in HeaderTree excludes children from the selected headers Release 0.3.5 ============= NEW - The project data is now serialized instead of stored in a SQL-database NEW - Cache is filled during scan NEW - Proper alignment of result attributes in tree view NEW - You can double click in the column chooser to add/remove items NEW - Save data from more that one file in the file tree NEW - Files for which no results are found are added to the Project NEW - timestamp data decoding (creation and modification) of mvhd, tkhd and mdhd atoms of all 3GP video and audio tracks FIX - Deletion of a file in the file tree now keeps the focus at the same line FIX - The application now displays a message when it gets out of memory FIX - MPEG-1 & 2 TimeCode is now formatted as specified by the specification Release 0.3.4 ============= FIX- MPEG2 fix to put subsequent group of picture headers in one data block when no start header is found FIX - MPEG2 fix to detect Slices when no start header is found NEW - QuickTime code added to parse the Elementary Stream Descriptor Release 0.3.3 ============= FIX - Results were sorted during 'Send To' and 'Save As' command, thus undoing user editing. CHG - In the last release you had to create your own strong name key file. The source now contains a dummy key. NEW - Update to VirtualTreeList 3.10.0 NEW - Update to NUnit 2.4.7 Release 0.3.2 ============= KNOWN ISSUE - Out of memory exception when scanning large files (>1GB) especially created by hard disk recorders NEW - Old Mpeg-1 & 2 detector removed NEW - New Mpeg 1 & 2 detector improved NEW - 3GPP/QuickTime detector now has descriptive names NEW - Possibility to add all meaningful headers details as column to the header view, otherwise grayed out NEW - Detectors now present the correct format (MPEG1/MPEG2/3GPP/MPEG4) NEW - Video format shown with datablock FIX - The MPEG-2 detector made it impossible for the MPEG-4 detector to do its job FIX - File scanner reports -50% progress fixed Release 0.3.1 ============= FIX - Fixed problem with order of items when copying to workpad FIX - Fixed problem in 'Send To' menu Release 0.3.0 ============= NEW - Redesign of architecture to handle container and codec data with different plug-ins NEW - Old MPEG 1 & 2 plug-in replaced by MPEG 1 & 2 container and codec plug-ins NEW - 3GPP container plug-in NEW - Send headers of selected type to work pad and player NEW - Save All Children functionality added NEW - Persist used columns per detector FIX - Fixed drag file to Defraser Window Release 0.2.7 ============= FIX - Send to <player> from work pad main menu FIX - Delete in work pad sorts items FIX - Unhandled exception while scanning MPEG-4 and clicking video data block FIX - No GUI updates after click on video data block NEW - Be able to add a file without first open or create a project NEW - recent projects and recent files Release 0.2.6 ============= CHG - Changed XtraTreeList for Virtual Tree Release 0.2.5 ============= FIX - MPEG 4 detector FIX - MPEG 1-2 detector FIX - Header detail view NEW - show progress during export to XML NEW - show use of shift key in status bar during drag to work pad Release 0.2.4 ============= NEW - MPEG4 metadata added FIX - Cancel of scan throwed exception FIX - Update of header detail view when first displayed FIX - Installation failed on some computers FIX - Drag to empty workpad failed FIX - License text added to about box FIX - Project created in non existing directory failed Release 0.2.3 ============= NEW - MPEG4 scanner added FIX - 'Send to <player>' bug fixed in Workpad Release 0.2.2 ============= NEW - Header detail view. CHG - Result tree view is now filled factor 13 faster. CHG - Argument 'hasChildren' removed from the method SaveResult of the IResultWriter interface. CHG - Methods in IResultWriter interface refactored to use objects instead of database ID's. Release 0.2.1 ============= FIX - MPEG 1&2 plug-in: false data blocks were detected; FIX - MPEG 1&2 plug-in: an exception was thrown for some mpeg files when using the GUI. Release 0.2.0 ============= First release on Source Forge
Release 0.4.3 ============= FIX - Solved out-of-memory exceptions caused by AVI and 3GPP detectors Release 0.4.2 ============= NEW - MPEG-4 detector: Time Increment Resolution is shown for Video Object Layer Header CHG - MPEG-4 detector: better parsing of H263 VOP's (parsing of PLUSPTYPE added; still not complete yet) FIX - MPEG-4 detector: not all VOP's were found FIX - MPEG-1 & 2 detector: PesPacket with stream ID==0xBE did create a new result when pes stream contains a value != 0xFF while the end of the header stops at start of next header FIX - Hex/Dec value of Offset and Length caption did not always display the correct value FIX - File not found exception was not caught when user clicked on stream in file tree after file has been removed FIX - If you want to build Defraser from code, you no longer need to remove the file 'licenses.licx' from the Visual Studio Solution file Release 0.4.1 ============= NEW - AVI detector added NEW - 3GPP 64 bit ChunkOffset atom added CHG - MPEG-1&2 detector starts a new result when the SystemClockReference is lower than the previous value or when there is a gap. FIX - Exception when adding a column to the Headers view from the Headers Details view while 'Auto Fit' is enabled FIX - New project is now always added to the Recent Projects menu option FIX - Sort order in Files view now on filename instead of path Release 0.4.0 ============= NEW - Conversion of the project files to Visual Studio 2008 FIX - 3GPP detector extended FIX - IsFullFile column removed from file tree FIX - Detector column added to file and header tree Release 0.3.6 ============= FIX - Send-to (external) or save-as in HeaderTree excludes children from the selected headers Release 0.3.5 ============= NEW - The project data is now serialized instead of stored in a SQL-database NEW - Cache is filled during scan NEW - Proper alignment of result attributes in tree view NEW - You can double click in the column chooser to add/remove items NEW - Save data from more that one file in the file tree NEW - Files for which no results are found are added to the Project NEW - timestamp data decoding (creation and modification) of mvhd, tkhd and mdhd atoms of all 3GP video and audio tracks FIX - Deletion of a file in the file tree now keeps the focus at the same line FIX - The application now displays a message when it gets out of memory FIX - MPEG-1 & 2 TimeCode is now formatted as specified by the specification Release 0.3.4 ============= FIX- MPEG2 fix to put subsequent group of picture headers in one data block when no start header is found FIX - MPEG2 fix to detect Slices when no start header is found NEW - QuickTime code added to parse the Elementary Stream Descriptor Release 0.3.3 ============= FIX - Results were sorted during 'Send To' and 'Save As' command, thus undoing user editing. CHG - In the last release you had to create your own strong name key file. The source now contains a dummy key. NEW - Update to VirtualTreeList 3.10.0 NEW - Update to NUnit 2.4.7 Release 0.3.2 ============= KNOWN ISSUE - Out of memory exception when scanning large files (>1GB) especially created by hard disk recorders NEW - Old Mpeg-1 & 2 detector removed NEW - New Mpeg 1 & 2 detector improved NEW - 3GPP/QuickTime detector now has descriptive names NEW - Possibility to add all meaningful headers details as column to the header view, otherwise grayed out NEW - Detectors now present the correct format (MPEG1/MPEG2/3GPP/MPEG4) NEW - Video format shown with datablock FIX - The MPEG-2 detector made it impossible for the MPEG-4 detector to do its job FIX - File scanner reports -50% progress fixed Release 0.3.1 ============= FIX - Fixed problem with order of items when copying to workpad FIX - Fixed problem in 'Send To' menu Release 0.3.0 ============= NEW - Redesign of architecture to handle container and codec data with different plug-ins NEW - Old MPEG 1 & 2 plug-in replaced by MPEG 1 & 2 container and codec plug-ins NEW - 3GPP container plug-in NEW - Send headers of selected type to work pad and player NEW - Save All Children functionality added NEW - Persist used columns per detector FIX - Fixed drag file to Defraser Window Release 0.2.7 ============= FIX - Send to <player> from work pad main menu FIX - Delete in work pad sorts items FIX - Unhandled exception while scanning MPEG-4 and clicking video data block FIX - No GUI updates after click on video data block NEW - Be able to add a file without first open or create a project NEW - recent projects and recent files Release 0.2.6 ============= CHG - Changed XtraTreeList for Virtual Tree Release 0.2.5 ============= FIX - MPEG 4 detector FIX - MPEG 1-2 detector FIX - Header detail view NEW - show progress during export to XML NEW - show use of shift key in status bar during drag to work pad Release 0.2.4 ============= NEW - MPEG4 metadata added FIX - Cancel of scan throwed exception FIX - Update of header detail view when first displayed FIX - Installation failed on some computers FIX - Drag to empty workpad failed FIX - License text added to about box FIX - Project created in non existing directory failed Release 0.2.3 ============= NEW - MPEG4 scanner added FIX - 'Send to <player>' bug fixed in Workpad Release 0.2.2 ============= NEW - Header detail view. CHG - Result tree view is now filled factor 13 faster. CHG - Argument 'hasChildren' removed from the method SaveResult of the IResultWriter interface. CHG - Methods in IResultWriter interface refactored to use objects instead of database ID's. Release 0.2.1 ============= FIX - MPEG 1&2 plug-in: false data blocks were detected; FIX - MPEG 1&2 plug-in: an exception was thrown for some mpeg files when using the GUI. Release 0.2.0 ============= First release on Source Forge
Copyright © 2009 Geeknet, Inc. All rights reserved. Terms of Use
Thanks for your rating!
Would you also like to write a review?