New version of UFS Explorer

[Iurii]

UFS Explorer Technician

Compared to UFS Explorer Professional Recovery, it has a number of additional features:

* Access to data on AIX (Legacy JFS1, JFS2), Xinous OpenServer (EAFS, HTFS, DTFS), Veritas Storage Foundation, HP-UX, etc. (VxFS4, VxFS6, VxFS7), Urive (NxFS)
* Work with QNAP NAS implementing automated tiering (Qtier technology)
* Automatic RAID reconstruction for Dell EqualLogic, IBM AIX (CAPI RAID), etc.
* Direct low-level interaction with SCSI devices using a dedicated SCSI command tool*
* Embedded means for secure data erasure (overwriting the existing data on the drive with zeroes)
* Extended report on files and folders with the possibility of file integrity control (hash value, metadata test)
* Obtaining information on the allocation of file fragments
* Expandability through the use of additional plugins (for data recovery from Dell Equal Logic SAN and others)

But there are the following restrictions:
* Limited-term license (1 year) issued to a single PC
* Windows installation only

[Iurii]

What's new in version 10.3:

* Added support of couple of 'alternative' key block formats for WD MyBook DUO (under 'Drives/bridges' security tool);
* Added possibility to search for lost/damaged LVM configurations without physical volume configuration by defining a PV without known ID;
* 'Filter file system' function now uses updated UI design with different classes of properties on different tabs;
* In the 'Dynamic HTML report': fixed issue with 'Save CSV report' function and changed CSV separator to 'coma' symbol;
* In the reporting function itself: added customization of separator for CSV reports (the default one is now 'coma');
- Also fixed several UI and report format issues;
* Reworked 'Save with filter' GUI: different filters separated to 'tabs', target path was made editable;
- Also reworked 'folder exclusion' mask as a separate setting;
* Added indication of ZFS pool component properties (vdev, RAID configuration, RAID-Z member, pool ID etc.);
* New filter UI design is also applied to reporting function;
* Access to NTFS volumes: Added support of Windows Overlay Filter (WOF) compression on files (both XPRESS and LZX);
* NTFS file system scan:
- Added search and processing of WOF-compressed files in scan result;
- Removed duplicate symbolic links;
- Corrected algorithm of directory structure recovery for 'lost' files;
* ExFAT file system scan: added possibility to recover items from partially wiped folders;
* In RAW recovery: added possibility to assemble SONY cam video streams with reverse header/data order.

[Iurii]

What's new in version 10.4:

* Disk imager: added option to save 'Host Specific' ATA log pages to SDLSP or directly to SATA physical disk clones;
* On-demand imaging:
- When target image file supports writing of ATA log pages, they are cloned automatically on first use;
- Added a tool for explicit imaging of ATA log pages to the target;
* Reworked 'Drives/Bridges security' tool to support ATA log pages from images or 'on-demand imaging task';
* Added double-click decryption of disks from WD MyBook with JMS561 bridge chip;
* Also added automatic recognition of Span/Stripe multi-disk RAID configurations on decrypted storages;
* LUKS decryption: extended allowed password length to 8K symbols, added support of null-symbols in keys/passwords;
* Fixed crash bug with in the disk imager working in ATA-mode;
* In SDLSP file format: added possibility to store 'Host Specific' ATA log pages;
* Added indication of encryption on disks from WD MyBook (DUO) with JMS561 bridge;
* Fixed issue with support of sparse files created with EXT2/3-style inodes on EXT file system;
* UFS file system: fixed a couple of bugs with processing of directory scan (after 'sparse' deletion).

[Iurii]

What's new in version 10.5:

* Added ZFS pool builder GUI:
- Added GUI to view/edit ZFS pool configuration, including Vdevs, RAID-Z level and members etc.;
- Possibility to assign components manually (after metadata damage) and force placeholders on place of missing components;
- Added 'New ZFS pool' function under 'RAID' menu to build a pool manually;
- 'View/Edit RAID' function for ZFS pool RAIDs is replaced with this tool to view/re-configure automatically assembled pools;
* Added support of Drobo short-form metadata of latest models;
* In Drobo assistant tool: added possibility to specify data block metadata size (to support older models/firmware);
* In disk imager:
- Added option to track disk by serial number after its reconnection at different device path;
- When resuming saving image to an existing SDLSP or VHDX file, software now verifies stored serial number to match with the source;
* ZFS file system access:
- Fixed an issue with 'missing' support of Big-Endian file system (SPARC);
- Fixed an issue with path navigation when multiple datasets enclosed to each other;
* In ZFS scan procedure: fixed an issue with detection of Big-Endian ZFS (SPARC);
* In file size report: added possibility to switch between long (full) numbers and short form in KB/MB/GB/TB;
* ExFAT scan: addeed support of 'padding' directory records;
* NTFS:fixed issue with support of big files when DATA attribute is moved to ATTR_LIST but still has duplication of 'DATA tail' in main MFT record.

[Iurii]

What's new in version 10.6:

* Virtual sector size transformation on images: added possibility to specify a custom source sector size;
* Drives/bridges security: added ATA "security unlock" support (the password must be known, including padding and transformation);
* Added support of password-based full-disk encryption on OpenBSD softraid;
* Added support of OpenBSD softraid (RAID0, RAID1, RAID5, Span);
* In disk imager: added a tool to re-image defect blocks (it resets the 'defect' status to the 'unread' status and allows to re-image the 'unread' zones);
* Microsoft Storage Spaces:
- Added basic support of multi-tier volumes with several rotation groups;
- Fixed parsing issue of 'parent link' metadata entries (version 2);
* Added a tool to open 'directory-bundled' images from a local file system:
- Added support of macOS sparsebundle/backupbundle format;
- Added support of Parallels HDD bundle virtual disks (with automatic support of snapshots);
* In media manager: added recognition of local Parallels Desktop virtual machines and possibility to access their virtual disks (under macOS);
* Disk images of Parallels Desktop software: added support of snapshots;
* Fixed scan issue that caused incorrect file system sub-trees reconstruction on Linux/Unix file systems (EXT, XFS etc.).

[Iurii]

What's new in version 10.7:

* In password unwrap tool: added support of key unwrap from Synology key vault files;
* Updated procedure of detection of Intel Cache Technology (Optane) for proper recognition of this technology in some scenarios;
* Enabled write support for 'span' constructions and 'chunked' VMDK files;
* Added VMDK format as a supported target format for the Disk Imager;
- Virtual disk size limit for VMDK images is set to 128EB (instead of 8TB in VMware GUI);
* Also added support of legacy VHD format as an output format for Disk Imager (for sources with capacity below 2040GB);
* Added support of importing defect maps in RSM format;
* In 'Save selection (advanced)' dialog added the possibility to fine-tune certain copying parameters to override temporary the global software settings;
- Also added possibility to set up copying 'with the full path from the root';
* Added 'Save with full path' tool to the context menu of individual files;
* Symbolic links support:
- Fixed a bug causing truncation of long symbolic links;
- In object properties GUI: now symbolic link is displayed fully, with no truncation;
* On XFS file system:
- Added support of 'long date' feature for both 'access' and 'scan';
- Fixed bug with 'dirty' short symbolic links;
- Added support of long symbolic links in older (plain) format;
* FAT32 scan: fixed bug with folder structure reconstruction when there are multiple deleted files and file system indexing is enabled.

[Iurii]

What's new in version 10.8:

* When indication of folders capacity is available (number and size of enclosed files), this information is now also saved to all reports;
* 'Save processed data' function now also saves device WWN to the image;
* Unproperly unmounted ('dirty') VHDX files are now opened read-only with no possibility to write to them;
* In VHDX/AVHDX format: added support of embedded log (transaction journal) to support 'virtual' log replay in case of 'dirty' virtual disk detachment;
* When scan result is restored to a different offset (from a disk/partition context menu) a confirmation warning message now appears;
* In file system direct access mode: added a function to calculate and show capacities of subfolders (size and count of files inside);
* Added support of NVMe SMART reporting in software version for Linux OS;
* ZFS file system (direct access): modified file 'open' procedure to support delayed loading of metadata and speed-up opening of large files;
* ReFS file system: added support of 'resident' files for both 'Access' and 'Scan' (small files stored in metadata with file system format 3.14 or later);
* FAT/FAT32 scan:
- Removed some 'junk' objects that can appear during 'indexing' stage of scan;
- Added support of older SONY camera style file deletion (indication with zero instead of E5h byte);
* In embedded viewer: added support of PDF documents in 'version 2' format and fixed few PDF format-related issues;
* In raw recovery:
- Added detection of PDF in format version 2;
- Fixed bug that caused some PDF files to be classified by mistake as Adobe Illustrator (AI) files;
- Added search for 'real' file size of PDF and AI documents (when possible).

[Iurii]

Data recovery plugin for Dell EqualLogic
is an additional software component designed to extend the functionality of UFS Explorer Technician and provide the possibility to deal with the volumes of Dell EqualLogic Storage Arrays using this very utility. With such an add-on loaded into the program, technical specialists can easily interact with the Dell EqualLogic SAN solution, explore the content of its volumes and perform further data recovery, saving a significant amount of time and effort that would otherwise be spent for mapping out the SAN's structure.

Compatible software
UFS Explorer Technician starting from version 10.

Supported Configurations
Latest metadata versions created on Dell EqualLogic Type 11 to Type 15 controllers with firmware versions from 7.1 to 10.0.

[Iurii]

Data recovery plugin for HP StorageWorks EVA
is a specialized addition to UFS Explorer Technician designed to facilitate the recovery of data lost from HP Enterprise Virtual Arrays. This external component enables technical experts to handle Vraid-operated EVA systems, overcoming various complexities associated with the use of this proprietary RAID implementation. Integrated into the software, the plugin equips it with the support for this SAN solution, which includes the possibility to reconstruct the Vraid array configuration, inspect the content of the virtual volumes and perform further data retrieval.

Compatible software
UFS Explorer Technician starting from version 10.

Supported Configurations
All metadata versions created on the following generations of the EVA product line:
- Initial Compaq EVA solutions of the 3000 and 5000 series;
- HP StorageWorks EVA of the 4100, 6100, and 8100 series;
- HP StorageWorks EVA of the 4400, 6400, and 8400 series;
- The latest HP StorageWorks EVA solutions of the P6300/P6500 series.

[Iurii]

What's new in version 10.9:

* Microsoft Storage Spaces:
- Added experimental support for 'fixup' of improperly unmounted volumes using the Transaction Log (via the 'RAID'->'Microsoft Storage Space volumes' tool);
- Fixed issue parsing volume metadata (record version 10);
- Fixed a bug with automatic updates to the 'dual parity' volumes when additional (missing) components are added;
* Added support of the Synology RAID-F1 pattern (both algorithm and support in RAID builder);
* In RAID builder:
- Added support of pattern rotations for 'dedicated parity' patterns of RAID5/RAID6;
- Added setting for rotating/dedicated Q-stripe for RAID6 and support of pattern indication for dedicated Q rotation type;
* Fixed recognition of RAID50/60 configurations with DDF2 RAID metadata on some Adaptec RAID boards;
* MDADM RAID metadata format:
- Added automatic recognition of dedicated parity configurations ('parity first'/'parity last' rotations) for both RAID5 and RAID6;
- Also added recognition and full support of RAID6 with RAID5-style rotation and dedicated parity (like 'left-symmetric-6', 'parity-first-6' etc. schemas);
* Ext3/Ext4 scan:
- Added support of journal checksum feature (for better deleted data recovery);
- Enabled EXT4 B-tree search for attempted recovery of big deleted files;
* Fixed bug with data access errors on 'transformed' (decrypted, byte-swapped etc.) in certain scenarios with transformation block size over one sector;
* Fixed bug with creation of image files in VHDX format;
* Linux software version in save/open dialogs now shows connected media from /media/USER_NAME subfolders;
* ReFS3 file system scan:
- Fixed bug with indexing procedure (incorrect location of indexed files);
- Added support of 'hard-links' in ReFS scan result.

[Iurii]

Data recovery plugin for HPE MSA
is a supplementary module designed to enhance the functionality of UFS Explorer Technician in regard to the recovery of data lost from Modular Storage Arrays of HPE. The plugin seamlessly integrates with the software and enables it to address the specific challenges associated with the HPE MSA SAN product. With its help, technical experts can easily inspect the content of virtual volumes and proceed to data retrieval, without having to handle all the intricacies of the storage pool structure "by hand".

Compatible software
UFS Explorer Technician starting from version 10.

Supported Configurations
Linear volumes created on HPE MSA models from MSA 2000 to MSA 2040; virtual volumes on HPE MSA 2040 and later.

[Iurii]

Data recovery plugin for HPE 3PAR StoreServe
is a specialized software module designed to complement UFS Explorer Technician, making it compatible with the 3PAR storage solution of HPE. The plugin equips this program with unique capabilities tailored for effective processing of HPE 3PAR systems. As a consequence, technical experts can rely on it to examine the contents of virtual volumes and quickly start data retrieval, without the need to analyze all intricacies of the underlying chunklet-based storage structure.

Supported Configurations
All metadata versions created on HPE 3PAR StoreServe appliances running HPE 3PAR OS 3.2 through 3.3.1.

Compatible software
UFS Explorer Technician starting from version 10.

[Iurii]

Data recovery plugin for Infinity SAN
is a special addition to UFS Explorer Technician developed to enhance the program’s functionality for seamless compatibility with a number of SAN solutions from different brands sharing one common technology – Infinity SAN, otherwise known as "Engenio". The plugin simplifies the SAN recovery process by assembling disk pools and allowing users to retrieve the content of virtual volumes available on such storage arrays as Dell PowerVault MD3 series, IBM DS3 series or NetApp E-series, without having to analyze and reproduce the underlying storage composition.

Supported Configurations
Storage models belonging to the Dell PowerVault MD3 series (MD3012/MD3024), IBM DS3 series or NetApp E-series, configured with:

All classic RAID levels (RAID 1, RAID 5, RAID 6, RAID 3, etc.);
Dynamic RAID (distributed RAID 6);
Storage pools with standard volumes;
Thin volumes.

Compatible software
UFS Explorer Technician starting from version 10.

[Iurii]

What's new in version 10.10:

* Adaptec RAID metadata: added support of RAID60 with Adaptec RAID6 rotation;
* HP SmartArray: added recognition and support of 0+1-style rotation;
* When software is closed or iSCSI server is stopped, locally mounted iSCSI targets are now disconnected automatically;
* DDF metadata:
- Added support of RAID 10/'Far' rotation and RAID 00 rotation (as a subvariant of RAID0);
- Also added support of RAID metadata timestamps;
* Reworked RAID10/RAID1E support:
- Added support of multiple data copies in rotation: from two and up to number of disks;
- Added support of 'Far' and '0+1' rotations in addition to Near/Interleaved (or 'Offset'/'Near' in terms of mdadm);
* Automatic RAID builder:
- Reworked assembly algorithm to fix an issue that prevented automatic building of RAIDs with some metadata damage scenarios;
- Added support of RAID metadata 'last updated' time (when available) for selection of more recent components to build the RAID;
- Removed automatic adding of 'incompletely rebuilt' components (when it's possible to identify them);
* MDADM RAID:
- Added support of metadata timestamp and 'incomplete rebuild' flag (both metadata versions 0.9 and 1.x);
- 'Reshape in progress' scenario is now also supported by combining already reshaped and pending areas;
- Added proper support for 'Offset'/'Near'/'Far' RAID 10 rotations with multiple data copies;
* Intel MSM: fixed issue with recognition of RAID10/1E configurations;
* Update to procedure of automatic partition detection:
- Implemented additional checks to distinguish between partially overwritten GPT and MBR formats;
- Added more checks to quickly detect lost/deleted partitions, now including BitLocker (when possible);
* Manual partition search tool: optimized speed and fixed issue skipping existing partitions for 'free space'-only scan;
* Storage properties panel: added display of RAID metadata last modified timestamp (when available) to check for 'outdated' components;
* Image viewer: fixed a bug with displaying JPEG with present, but empty EXIF.

[Iurii]

What's new in version 10.11:

* Apple Core Storage (HFS+) volumes: added support of type 24 data allocation;
* Fixed issue with using of LUKS2 passwords with null-symbols;
* When saving RAID configuration built on 'flat' disk images with sector size transformation, this transformation is now preserved;
* Fixed issue with support of newer EnCase Ex01 forensic image format (tests performed with FALCON-NEO imager);
* Added support of DFL-DE sector maps (both plain and compact) plus log file of other software with disk imaging capabilities;
* Fixed issue with using of wrong disk if source disk is disconnected and replaced with a different one;
* When source disk is reconnected to a different device path, the software attempts to restore connection by finding the disk by its serial (when possible);
* Reworked scan abortion procedure to allow much faster scan abortion on an area of defect blocks;
* NTFS scan procedure:
- More detailed parsing of directory indexes for better recovery of file names;
- Optimization for better support of file 'undelete' after deletion by the Linux NTFS driver.

[Iurii]

What's new in version 10.12:

* Introduced licensing with Thales Sentinel LDK: Registration codes must be replaced with Sentinel digital licenses;
* Introduced cross-platform (OS-independent) licensing;
* Rework of 'transform file system files' function to support NAS-specific transformations even if metadata is not detected automatically:
- Added possibility to specify explicitly file repository folder path;
- It is also possible to specify a custom (format-specific, pre-saved) 'cloud database';
* Added support of Synology Drive 'cloud' repository to 'transform file system files' function;
* Direct decryption of Synology LUKS volumes: fixed bug with decoding of base64-encoded rkey-file content by the 'password' dialogue;
* Fixed issue with BitLocker search when partition is available, but superblock is lost;
* Automatic RAID reconstruction: fixed a bug that prevented automatic assembly of 'stripe over mirrors' in some scenarios;
* Fixed issue with support of MS Storage Spaces with reported 'mirror/single component/2 copies' configuration;
* Fixed issue with decryption of BitLocker on storages with 4K sectors (affected BitLocker on Storage Spaces);
* Found and fixed a crash bug with direct reading of ReFS file system in some rare scenarios;
* Fixed a bug with reading sparse files on ZFS file system;
* File search tool is extended with 'search by content' option:
- Possibility to search for a specific pattern: at a fixed position or anywhere in a file;
- An option to specify 'content type' to search for (including custom, user-defined types) - independently or in conjunction with the search by pattern;
* Restoration of symbolic links:
- Now, by default, the software will attempt to restore symbolic links on the target;
- Added possibility to configure and save linked files instead of links (useful for Promise Apollo and similar scenarios);
- In the 'Copy selection (advanced)' tool, the above setting can also be enabled for once;
* Ext4 file system scan: removed duplicate files found in folder to make it more useful for data recovery;
* In raw recovery: added built-in support for some less common audio formats (FLAC, AMR).

[Iurii]

What's new in version 10.13:

* Asustor NAS support in 'media manager':
- Fixed issue with recognition of some encrypted shared folders;
- Added possibility to decrypt shared folders using 'backup keys' instead of passwords;
* Fixed bug with SQLite metadata parser that prevented loading of some databases for virtual file system transformations;
* In password unwrapping tool: added support of password extraction from Asustor 'key backup' files;
* 'Read' support of newer ESX OSDATA partition with VMFS6 format;
* Added an experimental support of NTFS Restore Points (to virtually roll back the volume to the checkpoint);
* Fixed support of Apple Core Storage volumes that was 'broken' in recent software versions;
* Btrfs file system: fixed issue reading RAID10 metadata format with missing disks;
* Fixed bug in adaptive reconstruction algorithm for RAID1E;
* FAT32 scan: better recognition of start position of file allocation table with severe damage to both copies;
* Updated procedure of file restoration from 'Recycle.Bin': now also restoring some previously skipped files

[Iurii]

What's new in version 10.14:

* Microsoft data deduplication support was deeply reworked for both NTFS and ReFS:
- Fixed an issue with incorrect data on ReFS (and on NTFS in some scenarios);
- Fixed an issue with consistency of large deduplicated files;
* Fixed issue with LUKS2 decryption with sector size over 512 bytes;
* Asustor MyArchive: added support of LUKS decryption (requires 'Ausustor MyArchive' password transformation OR use of the backup key);
* Intel ISM configurations: fixed issue with detection on image files in some scenarios;
* Microsoft Storage Spaces:
- Added support of SPCACHE storage caching mechanism (used in recent Windows Server versions to speed up 'Parity' volumes);
- Automatic Storage Space assembly procedure is modified to support Transaction log or Cache (if available);
- Automatic procedure now can be configured to not assemble spaces, assemble just a plain volume or assemble with log/cache enabled (default);
- Fixed issue updating configurations with missing drives;
* ReFS file system:
- Fixed issue that caused duplication of files produced by the file system scan in some scenarios;
- Fixed issue with support of reparse points with a shorter metadata chain (ReFS version 3.14);
* Fixed issue displaying of some detected complex volumes (required additional 'refresh' operation);
* Added detection of deleted partitions when disk is initialized with an empty GPT (only 'Reserved' partition is defined);
* ExFAT scan: a couple of fixes for better recovery quality of folder structure.

[Iurii]

What's new in version 10.15:

* Added a dedicated 'Detect and open a contained file system' tool (file context menu and toolbar) to quickly check content of image files on a new tab:
- Added support of archives (by means of virtual ArchFS) to be processed in this way;
- Fixed bug with recognition of DMG files for quick view (including current viewer);
* Added support of FreeBSD GEOM::ELI (GELI) full-disk encryption (including AES CBC/XTS and Camellia CBC):
- Support of pool GELI-based encryption of FreeNAS version 11 and below (decryption requires the exported 'key file');
* Update to Drobo BeyondRAID Assistant tool:
- Added automatic detection of 'block metadata size' before scan;
- Added adjustment of block metadata size for cases with different meta block size on disks;
- Also added verification and of validity and compatibility of 'block metadata size' before starting the scan;
* Asustor NAS in Media Manager:
- Fixed issue with not displaying content for single-disk NAS;
- Added search for RAID components even if NAS-specific metadata is not present on them;
* ZFS scan: fixed a crash bug in LZ4 decompression algorithm;
* ExFAT scan: reworked 'completion' stage to work significantly faster, as well as fixed an issue with an 'infinite completion' in some scenarios;
* NTFS file system scan: fixed bug with invalid reconstruction of bigger files from the Journal (log) file;
* Fixed bug with restoration of connection to a source disk image (or a virtual disk) after a storage with such an image is reconnected;
* Linux version: fixed problem running the software with 15/16bit desktop colour depths.

[ccc]

Hi Iurii

I don't know if you saw it , but MRT has changed the .map file structure in version 2.1.11.x
We cannot load a MRT DE task or a MRT DE map file anymore. Maybe you can take a look and add again this feature again.

Thanks