newsMobius Forensic Toolkit - News

 
 

Mobius Forensic Toolkit 1.1 released

Item posted by Eduardo Aguiar <aguiar> on Tue 13 Feb 2018 10:34:39 AM UTC.

Mobius Forensic Toolkit 1.1 has been released.

The registry classes automatically decrypt both UserAssist keys and Protected Storage System Provider (PSSP) keys. Both keys can be browsed with the hive extension. See the ChangeLog file for a complete list of changes. Main changes are:

  * SHA-1 cryptographic hash function implemented
  * ROT-13 cryptographic cipher algorithm implemented
  * Libmobius: Automatically decodes UserAssist registry keys
  * Libmobius: Automatically decrypts Protected Storage System Provider (PSSP) registry keys
  * Libmobius: New functions for registry and registry_key classes: get_key_by_mask, get_value_by_mask and get_data_by_mask
  * Unification of Python API under one library

Back to the top

Powered by Savane 3.13-02a9.
Corresponding source code