newsMobius Forensic Toolkit - News

 
 

Mobius Forensic Toolkit 1.2 released

Item posted by Eduardo Aguiar <aguiar> on Sat 03 Mar 2018 11:35:33 AM UTC.

Mobius Forensic Toolkit 1.2 has been released.

The registry classes automatically decrypt LSA Secrets registry values, including those LSA using PolEkList, such as Windows Vista and newer systems. See the ChangeLog file for a complete list of changes. Main changes are:

  * SHA-2 cryptographic hash functions implemented (224, 256, 384, 512, 512/224 and 512/256 bits)
  * AES cryptographic cipher algorithm implemented (128, 192 and 256 bits)
  * Hive extension: Shows decrypted LSA secrets values
  * Libmobius: hash_base, hash_stream and hash_block interfaces improved

Back to the top

Powered by Savane 3.13-02a9.
Corresponding source code