Mobius Forensic Toolkit - News
Mobius Forensic Toolkit v2.9 has been released
Item posted by Eduardo Aguiar <aguiar> on Tue 19 Nov 2024 12:04:01 AM UTC.
Hi!
Mobius Forensic Toolkit v2.9 has been released. This release adds a new C++ extension called app-ares that decodes the following Ares Galaxy's control files:
* ShareH.dat
* ShareL.dat
* PHashIdx.dat
__ARESTRA__.*
TempDL/PHash_.dat
app-ares C++ extension builds a unified data model using all the files listed above and it uses this model to retrieve the following evidences:
* Autofill data
* Local Files
* Received Files
* Shared Files
* User Accounts
You can download the latest version at https://www.nongnu.org/mobiusft.
Please, support this project. Here are the ways you can make a donation:
* Buy me a coffee at https://buymeacoffee.com/mobiusft
* Send any amount of crypto coins to one of the addresses listed at https://www.nongnu.org/mobiusft
Best regards,
Eduardo Aguiar
Powered by Savane 3.14-8aba.
Corresponding source code