All releases of Mobius Forensic Toolkit
Release Notes: This release features 14 new registry reports: autorun, services, IE download folder, IE typed URLs, MRU files opened/saved, MRU files executed, search assistant, printer ports, processors, all devices, enumerated devices, HID devices, network devices, and stream devices. Minor improvements were made.
Release Notes: This release introduces the Integrated Case Environment (ICE) extension, which replaces the Case Viewer extension. A new and improved data representation of the case model was developed. Several minor improvements were made.
Release Notes: The new extension Datasource Dossier handles Logicube Dossier imagefiles. The Hive Report features 3 new reports: LSA secrets, Protected storage, and Cached Credentials, and both user password report and email accounts report show the passwords when available. The Part Catalogue has been improved. Several other improvements were made.
Release Notes: The Hive (registry viewer) features three new reports: email accounts, TCP/IP interfaces, and computer descriptions. All registry reports can be exported as CSV and the user password report can be exported in a format suitable for John the Ripper as well. Minor improvements were made.
Release Notes: Six news registry reports were added: user assist, recent docs, product keys, O.S. folders, user logon info, and computer info. Minor improvements were made.
Release Notes: A bug in the startup code for release 0.5.6 was fixed.
Release Notes: The Hive Report features 8 new registry reports: installed programs, storage devices, optical devices, network adapters, video adapters, imaging devices, monitor devices, and user passwords. The user passwords report shows LM and NT hashes unencrypted. Minor improvements and bugfixes were made.
Release Notes: The Hive extension assembles the registry's logical structure, akin to that viewed with regedit. The new extension Hive Report adds report capabilities to the Hive extension. Three registry reports were added: OS information, user accounts and user profiles. The Report Viewer extension shows generated reports.
Release Notes: Extensions are now deployed in .mobius files. This release features three new extensions: Datasource SCSI, for drag'n'drop of /dev/sd* files directly into case, Data Viewer, a hexviewer for case items, and Extension Manager. Floppy Imager has been improved and uses direct I/O only. Minor improvements were made.
Release Notes: This release introduces the Hive extension, a registry file browser/viewer. XML pickle now encodes arbitrary dictionaries and Python objects that have circular and self references.
