newsMobius Forensic Toolkit - News

 
 

Mobius Forensic Toolkit v2.9 has been released

Item posted by Eduardo Aguiar <aguiar> on Tue 19 Nov 2024 12:04:01 AM UTC.

Hi!

Mobius Forensic Toolkit v2.9 has been released. This release adds a new C++ extension called app-ares that decodes the following Ares Galaxy's control files:

  * ShareH.dat
  * ShareL.dat
  * PHashIdx.dat
  __ARESTRA__.*
  TempDL/PHash_.dat

app-ares C++ extension builds a unified data model using all the files listed above and it uses this model to retrieve the following evidences:

  * Autofill data
  * Local Files
  * Received Files
  * Shared Files
  * User Accounts

You can download the latest version at https://www.nongnu.org/mobiusft.

Please, support this project. Here are the ways you can make a donation:

  * Buy me a coffee at https://buymeacoffee.com/mobiusft
  * Send any amount of crypto coins to one of the addresses listed at https://www.nongnu.org/mobiusft


Best regards,
Eduardo Aguiar

Back to the top

Powered by Savane 3.14-8aba.
Corresponding source code