v1.7.5-dev

Dev release - not extensively tested..

Windows binaries are now Python 3.12 compiled and run upto 30% faster ⚡

What's Changed

• Added TCC and UTMPX plugins to README.md by @mnrkbys in #99
• Added support for 3SLD format (fsevents) by @ydkhatri
• Added support for Arc Browser by @mnrkbys in #101
• modifications of autostart and firefox by @a5hlynx in #102
• Added support for sfl3 by @mnrkbys in #109
• Add a plugin for ASL by @a5hlynx in #108
• Added SCREENSHARING plugin by @mnrkbys in #111
• Added support for Safari profiles and tab snapshots by @mnrkbys in #115
• Added XPROTECTBEHAVIOR plugin by @mnrkbys in #114
• Added MSRDC (Microsoft Remote Desktop) plugin by @mnrkbys in #117
• Identify and process data from deleted User's DARWIN_ cache folders
• Python 3.12 compatibility
• Supports ASLA produced SPARSEIMAGE files now

Bug Fixes and improvements

• Faster processing due to improved file reading by preventing unneeded data copies
• Improved zlib handling
• Count user and system accounts separately in Users output
• Add timezone artifact
• Fixed a possible error in CFURLCACHE plugin by @mnrkbys in #112

Full Changelog: v1.5.8-dev...v1.7.5-dev

20230617

Dev release - not extensively tested..

Changes in this release

• More locations added to fetch serial number
• Ventura (macOS 13) support including reading RSR
• Docker support added
• Support for SNSS v3 for chromium browsers
• Extended CHROME to CHROMIUM covering more CHROMIUM based browsers
• Added plugin FIREFOX
• Better profile detection for CHROMIUM browsers
• Update AUTOSTART for macOS 13
• Update spotlight database paths for new ones on macOS 12+
• Support for parsing very old Spotlight v1 store.db files
• Python 3.10 support and binaries compiled with 3.10

Bug fixes

• Many minor bugs fixed
• Better handling of broken XML issues in certain plists
• Better fsevents reading, some data was skipped at times
• LZVN bug fixed
• Reading of the correct boot container (if multiple) and parsing the OS one

20220614

Dev release - not extensively tested..

Changes in this release

• Add CSV support for output (old CSV was TSV, also supported)
• Add new plugins - TCC and XPROTECTDIAG by Minoru Kobayashi (@mnrkbys)
• Add SafariTabs.db parsing

Bug fixes

• Fix an issue with Spotlight parsing (prop_type 8)
• Fix a display issue with excel dates for utmpx plugin
• Fix a display issue with excel dates for cfurul_cache plugin
• Minor bugfix for fsevents and utmpx plugin

20210904

This is a dev release that fixes a few bugs

20210824

A temporary dev release that fixes a few identified bugs

20210722

Changes in this release

• Fix a silly bug in macinfo.py, that only affects ios_apt

20210717

Changes in this release

• Added Safari AppExtension & WebExtension parsing

20210716

Changes in this release

• Improved parsing of AccountInfo key in com.apple.loginwindow.plist
• Add parsing of /Users/*/Library/Application Support/com.apple.backgroundtaskmanagementagent/backgrounditems.btm to AUTOSTART
• Add new plugins UTMPX, FILESHARING, CFURL_CACHE
• Add ChunkedDataWriter for plugins that need to write millions of rows (faster and memory efficient now)

Many of the above contributions from Minoru Kobayashi (@mnrkbys).

Bug fixes

• Reading fsevents in the several millions now does not consume all your memory, and won't error out for that reason
• Now reading fsevents from /System/Volumes/Data for all disks
• Fix bugs in plugins - Safari, Wifi, BasicInfo, RecentItems

20210512

Changes in this release

• Fixes issue with ios_apt.exe, which caused a few problems.

20210509

Changes in this release

• Support for reading Axiom's targeted collection, which is not a full disk image, just a zip file containing a subset of the files on disk - The new input_type option is AXIOMZIP