Difference between revisions of "Next Release"
Jump to navigation
Jump to search
| Line 5: | Line 5: | ||
==Improvements== | ==Improvements== | ||
| − | |||
| − | |||
| − | |||
| − | |||
* Improved the quality of parsing [[Type_Cellebrite_2|Cellebrite reports]] to clean up deleted entries and pull more contact information. | * Improved the quality of parsing [[Type_Cellebrite_2|Cellebrite reports]] to clean up deleted entries and pull more contact information. | ||
* We now exploit [[Type_Twitter_Database|Twitter direct messages]] as chat. | * We now exploit [[Type_Twitter_Database|Twitter direct messages]] as chat. | ||
* Improved [[Type_Protocol_Buffer|protocol buffer]] expansion. Added support for Unix microsecond timestamps. | * Improved [[Type_Protocol_Buffer|protocol buffer]] expansion. Added support for Unix microsecond timestamps. | ||
| − | |||
* [[Easy Button Load|Easy Button]] loads will now process <code>backup.z01</code> and [[Type_TAR|TAR]] files. | * [[Easy Button Load|Easy Button]] loads will now process <code>backup.z01</code> and [[Type_TAR|TAR]] files. | ||
| + | |||
| + | ===Bug Fixes=== | ||
| + | * Consolidated contacts reports where phone numbers showed up as email addresses. | ||
| + | * The loader now processes APFS filesystems correctly | ||
| + | * The [[Truxton_C_API#Enumeration|enumeration API]] wasn't scoping media and investigation enumeration. | ||
| + | * [[Type_Apple_KTX|KTX]] conversion now handle uncompressed payloads. | ||
| + | * [[Type_Parquet|Parquet]] files were not being identified. | ||
| + | * <code>Truxton.ETL</code> assembly was not sourcing relationships properly | ||
==New Types== | ==New Types== | ||
Revision as of 05:49, 2 July 2025
This is a place holder for what is being put into the next release of Truxton.
Contents
Truxton Next
<< Released 2025-?
Improvements
- Improved the quality of parsing Cellebrite reports to clean up deleted entries and pull more contact information.
- We now exploit Twitter direct messages as chat.
- Improved protocol buffer expansion. Added support for Unix microsecond timestamps.
- Easy Button loads will now process
backup.z01and TAR files.
Bug Fixes
- Consolidated contacts reports where phone numbers showed up as email addresses.
- The loader now processes APFS filesystems correctly
- The enumeration API wasn't scoping media and investigation enumeration.
- KTX conversion now handle uncompressed payloads.
- Parquet files were not being identified.
Truxton.ETLassembly was not sourcing relationships properly
New Types
File
- Type_EBTS - Electronic fingerprints
- Type_OBB - Android opaque binary blobs
- Type_Volley_Cache - Android library for applications to cache web data
- Type_Glide_Disk_Cache - Something really similar to Volley cache
- Type_Wwise_SoundBank - A bundle of sounds for an application
- Type_Roblox_Cache - Cache used by Roblox application
- Type_Android_Binary_XML - Yet another XML compression scheme (different from the other Android Binary XML format)
- Type_Apple_Spotlight_String_Map - String maps used by Apple's Spotlight system
- Type_Visio - Visio drawings
- Type_Envelope_Index - Apple Envelope Index SQLite database
- Type_XAR - Extensible Archive
- Type_Apple_Logdata_Statistics - Apple Logdata Statistics
- Type_Apple_Shutdown_Log - Apple shutdown log
Entity Types
Event Types
- EVENT_TYPE_COOKIE_CREATED - A browser cookie was created.
Location Type
Message Type
URL Types
- URL_TYPE_VOLLEY_CACHE - A URL used by Android's Volley caching system to retrieve a file from the internet
- URL_TYPE_APPLICATION - A URL used by an application to retrieve a file from the internet