UFFS v0.6.30
🚀 What's New
See the full changelog
and CHANGELOG.md in the repository for details.
📦 Downloads
UFFS is a Windows-native NTFS search engine — live indexing of
the Master File Table requires Windows. The engine core is
cross-platform, so macOS and Linux builds are shipped for
offline MFT analysis from captured .mft / .bin snapshots.
Each platform ships as a one-download ZIP bundle in three
tiers — pick the one that matches how much you need:
──────┬───────────┬─────────────────────────────────────────────────────────────────────
Tier │Zip suffix │Contents
──────┼───────────┼─────────────────────────────────────────────────────────────────────
min │-min.zip │uffs + uffsd + uffs-tui demo. Lean engine for CI/scripting.
──────┼───────────┼─────────────────────────────────────────────────────────────────────
normal│(no suffix)│min + uffsmcp + uffs-mft + docs + brand + packaging helper.
│ │Recommended.
──────┼───────────┼─────────────────────────────────────────────────────────────────────
full │-full.zip │normal + the uffs-diag diagnostic tools.
──────┴───────────┴─────────────────────────────────────────────────────────────────────
🖥️ Every tier bundles the free uffs-tui demo — the
zero-setup front door. After unzipping, just run uffs-tui
to browse your own drives in a UI (the daemon auto-starts).
The demo has capped result counts and disabled exports; see
DEMO-LICENSE.txt in the zip. Full TUI/GUI are commercial.
Individual binaries are also attached for automation that
wgets a single file.
🟦 Windows x86_64 — primary live-indexing target
- uffs-windows-x64.zip — recommended (normal tier): CLI +
daemon + MCP + MFT tooling + uffs-tui demo + icon + docs.
The .exes ship with the UFFS icon and asInvoker manifest
embedded. Also: uffs-windows-x64-min.zip,
uffs-windows-x64-full.zip.
- Raw binaries: uffs-windows-x64.exe, uffsd-windows-x64.exe,
uffsmcp-windows-x64.exe, uffs-mft-windows-x64.exe,
uffs-broker-windows-x64.exe, uffs-update-windows-x64.exe.
🍏 macOS Apple Silicon — offline MFT analysis
- uffs-macos-arm64.zip — recommended (normal tier): raw
binaries + uffs-tui demo + a ready-to-run UFFS.app bundle
- icns + docs + packaging/macos/bundle.sh for rebuilding.
Also: uffs-macos-arm64-min.zip, uffs-macos-arm64-full.zip.
- Raw binaries: uffs-macos-arm64, uffsd-macos-arm64,
uffsmcp-macos-arm64, uffs-mft-macos-arm64, uffs-update-macos-arm64.
- Intel Macs: run the arm64 build under Rosetta 2.
🐧 Linux x86_64 — offline MFT analysis
- uffs-linux-x64.zip — recommended (normal tier): binaries
- uffs-tui demo + full hicolor icon tree +
packaging/linux/install.sh (drops the .desktop entry and
icons under /usr/local with one sudo invocation) + docs.
Also: uffs-linux-x64-min.zip, uffs-linux-x64-full.zip.
- Raw binaries: uffs-linux-x64, uffsd-linux-x64,
uffsmcp-linux-x64, uffs-mft-linux-x64, uffs-update-linux-x64.
- Use with --mft-file to analyse captured MFT snapshots on servers, forensics VMs, or in Docker.
🔐 Verification
All binaries are accompanied by SHA256 checksums in CHECKSUMS.txt
(and SHA256SUMS, the conventionally-named copy the in-app
self-update helper fetches). Verify with:
sha256sum -c CHECKSUMS.txt
Additionally, every release asset carries a SLSA build-
provenance attestation signed with the workflow's Sigstore
OIDC identity. Verify with GitHub CLI:
gh attestation verify --owner skyllc-ai
A successful verification proves the bytes were produced by
this exact workflow run on this exact commit.
📋 SBOM (Software Bill of Materials)
Each workspace crate ships a CycloneDX 1.5 SBOM alongside the
binaries: sbom-.cdx.json. The SBOMs are covered by
the same SLSA attestation as the binaries, so you can verify
the inventory with the same command above. Inspect with any
CycloneDX-aware tool, e.g.:
jq '.components[] | {name, version, purl}' sbom-uffs-cli.cdx.json
📋 Installation
Recommended: ZIP bundle
- Download uffs-.zip for your platform.
- Unzip anywhere.
- Windows: the .exes are ready to run; place them on PATH. Icon + asInvoker manifest are already baked into the PE.
- macOS: double-click UFFS.app, or move the raw uffs binary into /usr/local/bin/. First launch: Gatekeeper warns because the bundle is unsigned — right-click → Open to confirm, or run xattr -dr com.apple.quarantine UFFS.app.
- Linux: run sudo packaging/linux/install.sh from the unzipped directory — installs the binary, the .desktop entry, and the full hicolor icon set. Override prefix with sudo PREFIX=/opt/uffs packaging/linux/install.sh.
Raw-binary path (automation)
- Download the individual binary, e.g. uffs-linux-x64.
- macOS / Linux: chmod +x uffs-* then optionally mv uffs-* /usr/local/bin/uffs.
- Windows: the .exe is ready to run; place it on PATH.
🛠️ Build Information
- Triggered by: release-pr-merge-#581
- Commit: b2a6d21
- Toolchain: pinned nightly from rust-toolchain.toml
- Profile: [profile.release] — LTO=fat, codegen-units=1, strip=symbols
- CPU baselines: x86_64 = x86-64-v3 (Haswell+/Zen+); macOS ARM64 = apple-m1 (M1+)
Full Changelog: https://github.com/skyllc-ai/UltraFastFileSearch/commits/v0.6.30
What's Changed
- feat(mft): for_each_record — streaming fixed-up targeted record reads by @githubrobbi in #577
- fix(mft): real overlapped re-open for snapshot devices + snapshot-correct $MFT fallback by @githubrobbi in #578
- fix(mft): demote IOCP-fallback chain messages from WARN to INFO by @githubrobbi in #579
- build: cross-platform 'just use-local' via rust-script installer by @githubrobbi in #580
- chore: release v0.6.30 — ship pipeline auto-commit by @githubrobbi in #581
Full Changelog: v0.6.29...v0.6.30
