Mobius Forensic Toolkit - News
Mobius Forensic Toolkit 1.1 released
Item posted by Eduardo Aguiar <aguiar> on Tue 13 Feb 2018 10:34:39 AM UTC.
Mobius Forensic Toolkit 1.1 has been released.
The registry classes automatically decrypt both UserAssist keys and Protected Storage System Provider (PSSP) keys. Both keys can be browsed with the hive extension. See the ChangeLog file for a complete list of changes. Main changes are:
* SHA-1 cryptographic hash function implemented
* ROT-13 cryptographic cipher algorithm implemented
* Libmobius: Automatically decodes UserAssist registry keys
* Libmobius: Automatically decrypts Protected Storage System Provider (PSSP) registry keys
* Libmobius: New functions for registry and registry_key classes: get_key_by_mask, get_value_by_mask and get_data_by_mask
* Unification of Python API under one library
Powered by Savane 3.14-8aba.
Corresponding source code