Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files for easy integration with other tool.

Changelog v0.5.13

This release adds support for Skype 5.x log files (main.db), makes the Hive extension show Protected Storage as a subtree under the PSSP registry key, and adds an Internet Explorer Autocomplete report.

  • new extension Skype Agent SQLite to handle Skype 5.x log files
  • new extension Hive Protected Storage
  • hive: shows Protected Storage subtree
  • hive: better handling of subkeys
  • hive-report: e-mail account report shows POP3, SMTP and HTTP passwords when available
  • hive-report: Protected Storage report eliminated
  • hive-protected-storage: new report “Internet Explorer auto complete”
  • extension-builder: save-as bug fixed
  • extension-builder: generate \’ instead of ‘ at EXTENSION_* vars
  • uri: new method ReadStream.get_file
  • uri: new method WriteStream.get_file
  • uri: new method File.get_local_reference
  • gtk-ui: ui.new-icon-from-data resizes image using INTERP_BILINEAR
  • gtk-ui: get_text do not export invisible columns

Download Mobius Forensic Toolkit v0.5.13

Download Post in PDF Save Post as PDF