Next Release

This is a place holder for what is being put into the next release of Truxton.

Truxton Next

<< Released 2025-?

Improvements

• Improved the quality of parsing Cellebrite reports to clean up deleted entries and pull more contact information.
• We now exploit Twitter direct messages as chat.
• Improved protocol buffer expansion. Added support for Unix microsecond timestamps.
• Easy Button loads will now process backup.z01 and TAR files.
• Firefox cookies are now exploited
• Better handling of SQLite files with custom collations.

Bug Fixes

• Consolidated contacts reports where phone numbers showed up as email addresses.
• The loader now processes APFS filesystems correctly
• The enumeration API wasn't scoping media and investigation enumeration.
• KTX conversion now handle uncompressed payloads.
• Parquet files were not being identified.
• Truxton.ETL assembly was not sourcing relationships properly

New Types

File

1. Type_EBTS - Electronic fingerprints
2. Type_OBB - Android opaque binary blobs
3. Type_Volley_Cache - Android library for applications to cache web data
4. Type_Glide_Disk_Cache - Something really similar to Volley cache
5. Type_Wwise_SoundBank - A bundle of sounds for an application
6. Type_Roblox_Cache - Cache used by Roblox application
7. Type_Android_Binary_XML - Yet another XML compression scheme (different from the other Android Binary XML format)
8. Type_Apple_Spotlight_String_Map - String maps used by Apple's Spotlight system
9. Type_Visio - Visio drawings
10. Type_Envelope_Index - Apple Envelope Index SQLite database
11. Type_XAR - Extensible Archive
12. Type_Apple_Logdata_Statistics - Apple Logdata Statistics
13. Type_Apple_Shutdown_Log - Apple shutdown log
14. Type_WiFi_Network_Store_Model - Apple WiFi Network Store database
15. Type_Notepad_Tabstate - Microsoft Notepad Tab State

Event Types

1. EVENT_TYPE_COOKIE_CREATED - A browser cookie was created.
2. EVENT_TYPE_COOKIE_USED - A browser cookie was used.

URL Types

1. URL_TYPE_VOLLEY_CACHE - A URL used by Android's Volley caching system to retrieve a file from the internet
2. URL_TYPE_APPLICATION - A URL used by an application to retrieve a file from the internet