Skip to content

20200529
Compare
Choose a tag to compare
@ydkhatri ydkhatri released this 29 May 15:31
· 358 commits to master since this release
v0.6-beta
f246814

Changes in this release

  • 🔓 APFS encryption support added, encrypted volumes can be processed by providing password/recovery-key
  • FAST mode, which skips plugins IDEVICEBACKUPS, SPOTLIGHT, UNIFIEDLOGS
  • BASHSESSIONS renamed to TERMSESSIONS (it reads zsh history too)
  • Better HFS parsing, and reading of large files
  • Support for Maquisition created T2 AFF4 images (finally!)
  • Export_log is now an sqlite db instead of CSV file
  • FSEVENTS plugin is now a lot faster
  • Better exception handling, script should halt on Ctrl-C now
  • Bugfixes, improvements in other plugins - QUICKLOOK, IMESSAGE, COOKIES, SPOTLIGHT, UNIFIEDLOGS

Pre-compiled executables (no python needed) are available below for Windows

Assets 4
Loading