Hi!
Mobius Forensic Toolkit v2.1 has been released. The main changes for this version are:
* VFS: New extension vfs.block.bitlocker adds support for Bitlocker Volumes. It detect, decode and retrieve metadata from Bitlocker Volumes, including protectors info.
* VFS: New extension vfs-block-view-bitlocker is the counterpart to the vfs.block.bitlocker extension. It shows Bitlocker Volume protectors, replacing the bdeinfo tool.
* VFS: Fixed decoding of DOS extended partitions.
* VFS: Fixed detection of FAT16 filesystems.
* app.chromium: Better automatic datetime conversion, that handles all known versions date/time values.
* ant.accounts: Changed to retrieve Login Data from Chromium based browsers.
You can download the latest version at https://www.nongnu.org/mobiusft.
Please, support this project. Here are the ways you can make a donation:
* Buy me a coffee at https://buymeacoffee.com/mobiusft
* Send any amount of crypto coins to one of the addresses listed at https://www.nongnu.org/mobiusft
Best regards,
Eduardo Aguiar
Hi!
Mobius Forensic Toolkit v2.0 has been released.
New module mobius::vfs, implemented in C++, replaces the old item.datasource structure. This development is an important milestone for Mobius Forensic Toolkit because:
You can download the latest version at https://www.nongnu.org/mobiusft.
Best regards,
Eduardo Aguiar
Hi!
Mobius Forensic Toolkit v1.37 has been released. Main changes are:
You can download the latest version at https://www.nongnu.org/mobiusft.
Best regards,
Eduardo Aguiar
Hi!
Mobius Forensic Toolkit v1.36 has been released. Main changes are:
* Added new C++ extension: partition-system-apm
* Added new C++ extension: partition-system-dos
* Added new C++ extension: partition-system-gpt
* filesystem_vfat: Improved detection of VFAT filesystem
* filesystem_vfat: Improved detection of FAT entry size
You can download the latest version at https://www.nongnu.org/mobiusft.
Best regards,
Eduardo Aguiar
Hi!
Mobius Forensic Toolkit v1.35 has been released. Main changes are:
* New extension "Evidence: Accounts" retrieves user accounts data, including passwords (when available), from both installed applications and visited sites
* New C++ extension date-code
* Libmobius: New mobius::core::mediator class in C++ supports callback functions written in both C++ and Python
* Libmobius: Compatible with C++17
You can download the latest version at https://www.nongnu.org/mobiusft.
Best regards,
Eduardo Aguiar
Hi!
Mobius Forensic Toolkit v1.34 has been released. Main changes are:
* evidence-received-files: Added support for µTorrent
* p2p-viewer: Added support for µTorrent
* New extension Evidence: IP Addresses shows remote IP addresses used by users
* Libmobius: New class mobius::core::resource
* Python API: New class mobius.core.resource
You can download the latest version at https://www.nongnu.org/mobiusft.
Best regards,
Eduardo Aguiar
Hi!
Mobius Forensic Toolkit v1.33 has been released. Main changes are:
* New extension KFF-manager
* P2P Viewer: Checkmark suspected files, using KFF hash sets
* P2P Viewer: Drag and drop full data from local/remote files
* Libmobius: New class mobius::io::text_reader
* Libmobius: New class mobius::io::text_writer
* Libmobius: New class mobius::io::line_reader
* Python API: New class mobius.io.text_reader
* Python API: New class mobius.io.text_writer
* Python API: New class mobius.io.line_reader
You can download the latest version at https://www.nongnu.org/mobiusft.
Best regards,
Eduardo Aguiar
Hi!
Mobius Forensic Toolkit v1.32 has been released. Main changes are:
You can download the latest version at https://www.nongnu.org/mobiusft.
Best regards,
Eduardo Aguiar
Hi!
Mobius Forensic Toolkit v1.30 has been released. Main changes are:
* New extension Evidence: Encryption Keys
* app.chromium: Automatically decrypts cookies (up to v79)
* app.skype: message_parser.py encoding error fixed
* Libmobius: item.attribute datatype changed to mobius::pod::data
You can download the latest version at https://www.nongnu.org/mobiusft.
Best regards,
Eduardo Aguiar
Hi!
Mobius Forensic Toolkit v1.29 has been released. Main changes are:
* app.skype: Added support for Skype v14 call logs
* ant.trash_can_entries: Added support for $Recyble.bin version 1 records (Vista and Win7)
* ant.trash_can_entries: Added support for Recycler folder (Win2k to WinXP)
* New C++ extension imagefile-dossier
* New C++ extension imagefile-ewf
* New C++ extension imagefile-msr
* New C++ extension imagefile-raw
* New C++ extension imagefile-solo
* New C++ extension imagefile-talon
* New C++ extension imagefile-vhd
* New C++ extension imagefile-vhdx
You can download the latest version at https://www.nongnu.org/mobiusft.
Best regards,
Eduardo Aguiar
Hi!
Mobius Forensic Toolkit v1.28 has been released.
Mobius Forensic Toolkit has been migrated from GTK2 to GTK3, including all extensions.
You can download the latest version at https://www.nongnu.org/mobiusft.
Best regards,
Eduardo Aguiar
Hi!
Mobius Forensic Toolkit v1.27 has been released. Main changes are:
* evidence-password-hashes: Keyword testing class optimized
* evidence-password-hashes: Keyword testing handles sha1.utf-16 hashes
* app.skype: Handle "AddMember" messages
* app.skype: Handle "Notice" messages
* app.skype: Handle "TopicUpdate" messages
* app.skype: Handle "HistoryDisclosedUpdate" messages
* app.skype: Handle "RichText/Media_CallRecording" messages
* app.skype: Generate different messages for call started and call ended
* Libmobius: Added support for EWF imagefiles with up to 14971 segment files
* Libmobius: Added support for IGE cipher_block
* Python API: mobius.model.item tp_getattro/tp_setattro implemented
You can download the latest version at https://www.nongnu.org/mobiusft.
Best regards,
Eduardo Aguiar
Hi!
MobiusFT's AppImage file has been release. Download MobiusFT AppImage file, make it executable and run in all common Linux distributions. The AppImage file contains almost all libraries and Python packages needed to run Mobius Forensic Toolkit, all bundled together into a single executable file for Linux. You still have to install Python v2.7.xx in order to run it.
You can download the latest version at https://www.nongnu.org/mobiusft.
All the best,
Eduardo Aguiar
Hi!
Mobius Forensic Toolkit v1.26 has been released. Main changes are:
* Hive-report: New report Word Wheel Query terms
* ant.text_autocomplete: Retrieves data from WordWheelQuery registry keys
* ant.text_autocomplete: Retrieves data from Search Assistant registry keys
* datasource-model: Set thumbdrive attributes
* Libmobius: New class mobius::ui::message_dialog
* Python API: New class mobius.ui.message_dialog
* Python API: Migrating code to Python 3.x
You can download the latest version at https://www.nongnu.org/mobiusft.
Hi!
Mobius Forensic Toolkit v1.25 has been released. Main changes are:
* ant.opened_files: Retrieves info from Windows/Recent .lnk files
* Libmobius: Added support for C++ extension
* Libmobius: New module mobius::ui
* New C++ extension UI/gtk2
You can download the latest version at https://www.nongnu.org/mobiusft.
Hi!
Mobius Forensic Toolkit v1.24 has been released. Main changes are:
* New extension Evidence Trash Can Entries
* New extension GTK UI Hexview
* File-Explorer: New File Finder panel
* File_Explorer: New File Properties panel
* File_Explorer: New Hex Viewer panel
* File_Explorer: New Content Properties panel
* Iped-Frontend: Many improvements/bug fixes were implemented
* app.chromium: Added support for Microsoft Edge
* app.chromium: Added support for CCleaner Browser
* ant.cookies: Added support for Microsoft Edge cookies
* Libmobius: New class mobius::decoder::lnk
* Libmobius: New function mobius::decoder::btencode
* Python API: New class mobius.decoder.lnk
* Python API: New function mobius.decoder.btencode
You can download the latest version at https://www.nongnu.org/mobiusft.
Hi!
Mobius Forensic Toolkit v1.23 has been released.
A new extension called IPED Frontend has been implemented. It runs IPED on selected case items, open processed items and generate reports on selected items.
You can download the latest version at [Https://www.nongnu.org/mobiusft].
Mobius Forensic Toolkit v1.22 has been released.
* Added support for ExFAT filesystems
* New extension evidence-calls lists call logs
* New extension evidence-text-autocomplete shows autocomplete texts
* New module mobius::vfs::filesystem
You can download the latest version at https://www.nongnu.org/mobiusft.
Mobius Forensic Toolkit v1.21 has been released.
* New extension Evidence-Viewer groups all evidence views
* New extension evidence-bookmarked-urls shows Bookmarked URLs
* app.skype: Better handling of chat messages with multiple recipients
* Libmobius: SGML tokenizer and SGML parser implemented
* Libmobius: file/folder implementation for interfacing libtsk
You can download the latest version at https://www.nongnu.org/mobiusft.
Mobius Forensic Toolkit v1.20 has been released.
* New extension Search Viewer shows textual searches made by users on WWW sites
* Spider: Added support for AppWiki
* Spider: Added support for CKaach Browser
* Spider: Added support for Kodi Browser Launcher
* Spider: Added support for Kodi Chrome Launcher
* Spider: Added support for Bradesco Net Express
* Libmobius: New module mobius::pod for dynamic data models
You can download the latest version at https://www.nongnu.org/mobiusft.