Release 2024-02-06

Truxton 4.3.1

<< Released 2024-02-06 >>

Improvements

1. We pull more information from Apple CommCenter plists
2. Location history is now parsed from Google Takeouts
3. Media will now have hashes calculated for them
4. Investigation Summary report now includes referenced file contents
5. MAC addresses are now extracted from Google Takeout
6. Include ValidateLoad.exe for tool validation
7. KnowledgeC files are now exploited
8. Added LZ4 compression
9. Better Protocol Buffer support
10. Better file carving. We now score 100% hash match on the especially devious Khyrenz forensic carving test media.
11. We now write more information to lock files (who wrote it and why)
12. Added more file types that can be given names to carved files
13. Support Python 3.12
14. You can now specify a database password when installing Truxton

Bug Fixes

1. Accounts are now added as part of Android contacts
2. Consolidated Contact report was missing some email addresses
3. Better rendering of PDF files
4. XRY expansion missed some SMS messages
5. Android SMS was missing messages
6. MBOX expansion is now more forgiving about garbage at the beginning
7. Fixed Chinese text appearing in log files
8. Better temporary file cleanup after errors
9. Deleting a Tag now deletes everywhere
10. Azure Forensic logging was missing location types
11. Fixed edge condition when carving files from multiple machines
12. Better identification of UTF-8 text, JSON and DJI data
13. Searching text in the desktop's hex view had wrong highlight length

New Types

1. 11 new file types
2. 2 new Location types (Google Takeout Place visit and Activity Segment)
3. 3 new Event types (Google Takeout Place visit, Activity Segment and Financial Transaction)
4. 4 New Entity types
5. There is now a Microsoft Documents file group