Mobius Forensic Toolkit v0.5.11 Released
Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files for easy integration with other tool.
Changelog v0.5.11
- mobius_case_update eliminated
- application.py: emits ‘app.resource-added’
- application.py: emits ‘app.resource-removed’
- ice: updates the tools menu dynamically
- gtk-ui: widget ‘data-table’ renamed to ‘tableview’
- gtk-ui: attribute-list and tableview export data as LaTeX table
- hive: function get_key_by_path created
- hive: function get_key_by_name created
- hive: function get_value_by_path created
- hive: function get_value_by_name created
- hive: function get_data_by_path created
- hive: function get_data_by_name created
- hive: calls to Registry.__update_root_keys fixed
- hive: uses ‘\’ as key separator instead of ‘/’
- hive: handles HKU\.DEFAULT
- hive: uses app.resources instead of services
- hive: service registry.register-report eliminated
- hive: service registry.unregister-report eliminated
- hive: can export values as report
- hive-report: last access date added to the recent-docs report
- hive-report: new “autorun” report
- hive-report: new “services” report
- hive-report: new “Internet Explorer download folder” report
- hive-report: new “Internet Explorer typed URLs” report
- hive-report: new “My Recent Documents by Filetype” report
- hive-report: new “MRU files opened/saved” report
- hive-report: new “MRU files executed” report
- hive-report: new “search assistant”‘ report
- hive-report: new “printer ports” report
- hive-report: new “processors” report
- hive-report: new “all devices” report
- hive-report: new “HID devices” report
- hive-report: new “network devices” report
- hive-report: new “stream devices” report
- hive-report: user logon info added to user accounts report
- hive-report: installed programs report shows all entries of the Uninstall key and key mtime
- hive-report: last modification and last load times added to user profiles report
- report-model: escapes ‘\’ as “\textbackslash” instead of “\backslash”
Download Mobius Forensic Toolkit v0.5.11