Release 2024-09-10

Truxton 4.3.1.40910

<< Released 2024-09-12 >>

Improvements

1. Generic SQLite Exploitation
2. Desktop now displays "No valid timestamp" instead of dates of 1601-01-01
3. New C APIs:
   1. truxton_add_triage_file()
   2. truxton_remove_triage_file()
   3. truxton_time_now()
   4. Added support for enumerating file types
   5. Content status names are now retrievable
4. Consolidated Contacts report is now better at merging entries
5. GeoTIFFs are now thumbnailed
6. Better file length calculation when carving KeePass Database files
7. Loading a TAR is now like loading a disk image. The file itself is not put into Truxton, just the files that come out of it.
8. New files exploited:
   1. dBeaver Credentials
   2. Picasa database
   3. Android Installed applications
   4. Embedded Plists
   5. Apple core location
   6. AT&T Phone Book Backup
   7. ADF properties
   8. ADF bundles
   9. Compensated Phase History Data
   10. AirTag data

Bug Fixes

1. Fixed a double initialization bug in Python
2. Calculating the length of carved UTF-8 files has been fixed
3. Fixed a bug in Python time parsing
4. Fixed a bug in Python enumeration
5. Cleaning of the [EntityString] table as part of maintenance
6. XML Plists can now have multiple data elements per key element.
7. M2TS carving now handles 188 and 192 byte packets
8. Fixed a bug where some files being added weren't being file typed

New Types

1. 88 new file types