Difference between revisions of "Next Release"
Jump to navigation
Jump to search
| Line 40: | Line 40: | ||
===Event Types=== | ===Event Types=== | ||
| − | # [[ | + | # [[Event Types|EVENT_TYPE_COOKIE_CREATED]] - A browser cookie was created. |
| − | # [[ | + | # [[Event Types|EVENT_TYPE_COOKIE_USED]] - A browser cookie was used. |
===Location Type=== | ===Location Type=== | ||
Revision as of 17:37, 5 July 2025
This is a place holder for what is being put into the next release of Truxton.
Contents
Truxton Next
<< Released 2025-?
Improvements
- Improved the quality of parsing Cellebrite reports to clean up deleted entries and pull more contact information.
- We now exploit Twitter direct messages as chat.
- Improved protocol buffer expansion. Added support for Unix microsecond timestamps.
- Easy Button loads will now process
backup.z01and TAR files. - Firefox cookies are now exploited
Bug Fixes
- Consolidated contacts reports where phone numbers showed up as email addresses.
- The loader now processes APFS filesystems correctly
- The enumeration API wasn't scoping media and investigation enumeration.
- KTX conversion now handle uncompressed payloads.
- Parquet files were not being identified.
Truxton.ETLassembly was not sourcing relationships properly
New Types
File
- Type_EBTS - Electronic fingerprints
- Type_OBB - Android opaque binary blobs
- Type_Volley_Cache - Android library for applications to cache web data
- Type_Glide_Disk_Cache - Something really similar to Volley cache
- Type_Wwise_SoundBank - A bundle of sounds for an application
- Type_Roblox_Cache - Cache used by Roblox application
- Type_Android_Binary_XML - Yet another XML compression scheme (different from the other Android Binary XML format)
- Type_Apple_Spotlight_String_Map - String maps used by Apple's Spotlight system
- Type_Visio - Visio drawings
- Type_Envelope_Index - Apple Envelope Index SQLite database
- Type_XAR - Extensible Archive
- Type_Apple_Logdata_Statistics - Apple Logdata Statistics
- Type_Apple_Shutdown_Log - Apple shutdown log
- Type_WiFi_Network_Store_Model - Apple WiFi Network Store database
- Type_Notepad_Tabstate - Microsoft Notepad Tab State
Entity Types
Event Types
- EVENT_TYPE_COOKIE_CREATED - A browser cookie was created.
- EVENT_TYPE_COOKIE_USED - A browser cookie was used.
Location Type
Message Type
URL Types
- URL_TYPE_VOLLEY_CACHE - A URL used by Android's Volley caching system to retrieve a file from the internet
- URL_TYPE_APPLICATION - A URL used by an application to retrieve a file from the internet
