Release 2022-09-12

Truxton 4.2.1.21013

<< Released 2022-09-12 >>

Improvements

1. EXIF parsing can now handle unsorted fields
2. New Media type of "Vehicle"
3. Exploit the following file types:
   1. Android ID Settings
   2. Android PCW Device Settings
   3. Generic Logs
   4. Android Settings
   5. Android Bookmarks
   6. Samsung Notes
4. Better labeling of Android call events
5. Python API now supports id parameters being string or UUIDs
6. Triage loads have been rewritten. Filenames and patterns now come from the "TriageFile" table in the database so users can add their own.
7. Triage loads will now have the word "Triage" in their description
8. New artifact type of "Device Identifier"
9. Better exploitation of Android Contacts
10. Depot files marked as "ToBeDeleted" will be deleted during Depot Consolidation if the disk becomes full before continuing. A disk full situation will not stop consolidation.
11. New event type of "Vehicle" for door-open, door-closed type events.
12. New relationship types:
    1. Profile Photo
    2. Member Of
    3. Associated With
    4. In Contact With
13. New Python and C APIs for parsing time (yes, it is a thing), black box debugging, carving a single file for child files, and adding investigator notes.

Bug Fixes

1. Message priority was not being passed along. This caused media to backup up at certain stages.
2. Events are now extracted from Android Calendars
3. Better checking for duplicate messages
4. Better checking for duplicate locations
5. Apple DSID's were being tagged as Apple Authentication IDs

New File Types

1. 15 new file types