Release 2022-10-23

Truxton 4.2.2

<< Released 2022-10-23 >>

Scrap this and pickup from Oct 13, 2022

Improvements

1. Python APIs that require a UUID can now accept a UUID or string object
2. New C APIs:
   1. Enumeration
   2. ETL Routing
   3. Blackbox Recorder
   4. Time string parser
   5. truxton_communication_add_participant()
   6. Support for adding investigator notes
3. New Python APIs
   1. carvefile()
   2. parsetime()
   3. addparticipant()
   4. New note() type for adding investigator notes
4. Triage loads can now use regular expressions to identify desirable files. These are stored in the [TriageFiles] table in the database.
5. New TriageFiles tool that helps you determine the names of useful files
6. Identical entries in a Zip archive are now ignored
7. If a drive fills when loading, Truxton will now delete depot files that have been marked for deletion and continue processing.
8. Better deduplication of MIME messages
9. Better deduplication of geographic locations
10. MobileCards in Cellebrite Reports are now handled

Bug Fixes

1. Message Priorities weren't being handled properly
2. EXIF parsing didn't handle unsorted fields (against the standard)
3. Never eliminate by file type now works
4. All tables are now cleaned during maintenance
5. Archive Expander's depots are now properly cleaned
6. Better support for spanned Zip files
7. Bad SQL when expanding Android contacts

New Types

1. 21 new file types
2. Vehicle media type
3. Device ID artifact type
4. Member Of relationship type
5. Associated With relationship type
6. In Contact With relationship type
7. Chat URL type