Skip to content

Commit

Permalink
Added Changes.txt and updated version to 0.2
Browse files Browse the repository at this point in the history
  • Loading branch information
ydkhatri committed Dec 7, 2017
1 parent 3cf4b2b commit 32192d8
Show file tree
Hide file tree
Showing 3 changed files with 22 additions and 2 deletions.
20 changes: 20 additions & 0 deletions CHANGES.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
Updates in 20171207 (v0.2):

+ APFS support added, we can parse APFS containers and volumes now
+ New plugin - PrintJobs
+ Retrieves deleted users
+ Retrieves default user's password if 'autologon' was enabled
+ Sidebarlists plist is now parsed & Alias v3 parsing added
+ Vol created dates are now extracted from FXDesktopVolumePositions
+ Better ALIAS v2 parsing, new Info column in RecentItems output

! Bug fixed - now binary BLOBs write correctly to sqlite db
! Minor fixes in RecentItems and common.py

Updates in Version 20170902(v0.12):

+ New plugin BASHSESSIONS that parses bash_sessions and bash_history
+ Added processing of 'finder' plist to RECENTITEMS plugin
+ More user data is parsed (account policy data such as creation date, last password set date, password hint,..)

! Minor bug fixes
2 changes: 1 addition & 1 deletion mac_apt.py
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@
import textwrap
from plugin import *

__VERSION = "0.1"
__VERSION = "0.2"
__PROGRAMNAME = "macOS Artifact Parsing Tool"
__EMAIL = "yogesh@swiftforensics.com"

Expand Down
2 changes: 1 addition & 1 deletion mac_apt_singleplugin.py
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@
import textwrap
from plugin import *

__VERSION = "0.1"
__VERSION = "0.2"
__PROGRAMNAME = "macOS Artifact Parsing Tool - Single Plugin mode"
__EMAIL = "yogesh@swiftforensics.com"

Expand Down

0 comments on commit 32192d8

Please sign in to comment.