Mobius Forensic Toolkit - News
posted by aguiar, Tue 19 Nov 2024 12:04:01 AM UTC
Hi!
Mobius Forensic Toolkit v2.9 has been released. This release adds a new C++ extension called app-ares that decodes the following Ares Galaxy's control files:
* ShareH.dat
* ShareL.dat
* PHashIdx.dat
__ARESTRA__.*
[...]
posted by aguiar, Sat 12 Oct 2024 10:11:13 AM UTC
Hi!
Mobius Forensic Toolkit v2.8 has been released. The most relevant changes for this version are:
* ant.evidence.ufdr retrieves Contacts from Cellebrite's UFDR files
* ant.evidence.ufdr retrieves Passwords from Cellebrite's UFDR files
[...]
posted by aguiar, Sun 15 Sep 2024 02:25:08 PM UTC
Hi!
Mobius Forensic Toolkit v2.7 has been released. The most relevant changes for this version are:
* mobius.ui: New widgets: label, box, container, and stacked_container
* datasource.ufdr.parser: Added support for metadata section "Extraction Data"
[...]
posted by aguiar, Thu 22 Aug 2024 09:25:36 AM UTC
Hi!
Mobius Forensic Toolkit v2.6 has been released. The most relevant changes for this version are:
* Added new evidence type: Wireless Connection
* Added new evidence type: Wireless Network (click here for a complete list of supported evidence types)
[...]
posted by aguiar, Wed 31 Jul 2024 09:30:31 AM UTC
Hi,
Mobius Forensic Toolkit v2.5 has been released!
This release adds support for Cellebrite's UFDR report files. Now, you can set a UFDR datasource, you can have access to the evidences available in UFDR report files, and you can process UFDR files using IPED, through the iped-frontend extension.
[...]
posted by aguiar, Tue 02 Jul 2024 09:40:57 AM UTC
Hi!
Mobius Forensic Toolkit v2.4 has been released. The main changes for this version are:
* Added new evidence type: Installed Programs
* ant.ip_addresses: Changed to retrieve external IP addresses from HTTP cookies
* ant.accounts: Added support for Ares Galaxy user accounts
[...]
posted by aguiar, Fri 31 May 2024 11:03:20 AM UTC
Hi!
Mobius Forensic Toolkit v2.3 has been released. The main changes for this version are:
* Added new module app.itubego to retrieve artifacts from iTubeGo app
* ant.text_autocomplete: Added support for iTubeGo URL history entries
[...]
posted by aguiar, Sun 12 May 2024 03:07:28 PM UTC
Hi!
Mobius Forensic Toolkit v2.2 has been released. The main changes for this version are:
* ant.turing automatically decrypts "v10" passwords from newest Chromium based browsers
* ant.trash_can_entries retrieves data from deleted $I entries
[...]
posted by aguiar, Thu 22 Feb 2024 10:22:53 AM UTC
Hi!
Mobius Forensic Toolkit v2.1 has been released. The main changes for this version are:
* VFS: New extension vfs.block.bitlocker adds support for Bitlocker Volumes. It detect, decode and retrieve metadata from Bitlocker Volumes, including protectors info.
[...]
posted by aguiar, Fri 08 Dec 2023 12:52:50 PM UTC
Hi!
Mobius Forensic Toolkit v2.0 has been released.
New module mobius::vfs, implemented in C++, replaces the old item.datasource structure. This development is an important milestone for Mobius Forensic Toolkit because:
- mobius::vfs implements a very powerful data block detection and decoding framework.
Powered by Savane 3.14-8aba.
Corresponding source code