Difference between revisions of "Next Release"

From truxwiki.com
Jump to navigation Jump to search
Line 5: Line 5:
  
 
==Improvements==
 
==Improvements==
* Fixed a bug in the consolidated contacts reports where phone numbers showed up as email addresses.
 
* Fixed a bug in the loader that was preventing APFS filesystems from being parsed
 
* Fixed a bug in the [[Truxton_C_API#Enumeration|enumeration API]] that prevented scoping media and investigation enumeration.
 
* Fixed a bug in [[Type_Apple_KTX|KTX]] conversion where uncompressed payloads were not being handled properly.
 
 
* Improved the quality of parsing [[Type_Cellebrite_2|Cellebrite reports]] to clean up deleted entries and pull more contact information.
 
* Improved the quality of parsing [[Type_Cellebrite_2|Cellebrite reports]] to clean up deleted entries and pull more contact information.
 
* We now exploit [[Type_Twitter_Database|Twitter direct messages]] as chat.
 
* We now exploit [[Type_Twitter_Database|Twitter direct messages]] as chat.
 
* Improved [[Type_Protocol_Buffer|protocol buffer]] expansion. Added support for Unix microsecond timestamps.
 
* Improved [[Type_Protocol_Buffer|protocol buffer]] expansion. Added support for Unix microsecond timestamps.
* Fixed a bug where [[Type_Parquet|Parquet]] files were not being identified.
 
 
* [[Easy Button Load|Easy Button]] loads will now process <code>backup.z01</code> and [[Type_TAR|TAR]] files.
 
* [[Easy Button Load|Easy Button]] loads will now process <code>backup.z01</code> and [[Type_TAR|TAR]] files.
 +
 +
===Bug Fixes===
 +
* Consolidated contacts reports where phone numbers showed up as email addresses.
 +
* The loader now processes APFS filesystems correctly
 +
* The [[Truxton_C_API#Enumeration|enumeration API]] wasn't scoping media and investigation enumeration.
 +
* [[Type_Apple_KTX|KTX]] conversion now handle uncompressed payloads.
 +
* [[Type_Parquet|Parquet]] files were not being identified.
 +
* <code>Truxton.ETL</code> assembly was not sourcing relationships properly
  
 
==New Types==
 
==New Types==

Revision as of 05:49, 2 July 2025

This is a place holder for what is being put into the next release of Truxton.

Truxton Next

<< Released 2025-?

Improvements

Bug Fixes

  • Consolidated contacts reports where phone numbers showed up as email addresses.
  • The loader now processes APFS filesystems correctly
  • The enumeration API wasn't scoping media and investigation enumeration.
  • KTX conversion now handle uncompressed payloads.
  • Parquet files were not being identified.
  • Truxton.ETL assembly was not sourcing relationships properly

New Types

File

  1. Type_EBTS - Electronic fingerprints
  2. Type_OBB - Android opaque binary blobs
  3. Type_Volley_Cache - Android library for applications to cache web data
  4. Type_Glide_Disk_Cache - Something really similar to Volley cache
  5. Type_Wwise_SoundBank - A bundle of sounds for an application
  6. Type_Roblox_Cache - Cache used by Roblox application
  7. Type_Android_Binary_XML - Yet another XML compression scheme (different from the other Android Binary XML format)
  8. Type_Apple_Spotlight_String_Map - String maps used by Apple's Spotlight system
  9. Type_Visio - Visio drawings
  10. Type_Envelope_Index - Apple Envelope Index SQLite database
  11. Type_XAR - Extensible Archive
  12. Type_Apple_Logdata_Statistics - Apple Logdata Statistics
  13. Type_Apple_Shutdown_Log - Apple shutdown log

Entity Types

Event Types

  1. EVENT_TYPE_COOKIE_CREATED - A browser cookie was created.

Location Type

Message Type

URL Types

  1. URL_TYPE_VOLLEY_CACHE - A URL used by Android's Volley caching system to retrieve a file from the internet
  2. URL_TYPE_APPLICATION - A URL used by an application to retrieve a file from the internet