Janik Besendorf
088a3f453a
Remove unused type imports
2026-01-27 19:22:30 +01:00
besendorf
6a76191155
Merge branch 'main' into v2
2026-01-27 19:17:14 +01:00
viktor3002
7173e02a6f
Check receiver names for IoCs ( #721 )
...
* receiver names are checked if a known malicious app id is a substring
* ruff syntax fixes
---------
Co-authored-by: Viktor <vik@tor.me >
Co-authored-by: besendorf <janik@besendorf.org >
2026-01-10 15:24:20 +01:00
Janik Besendorf
c779009550
fix typing for mypy
2025-12-20 09:50:55 +01:00
Donncha Ó Cearbhaill
8f34902bed
Bump version for release v2.7.0 ( #727 )
v2.7.0
2025-12-19 13:48:15 +01:00
Donncha Ó Cearbhaill
939bec82ff
Fix Makefile and PyProtject config for current Ruff ( #726 )
2025-12-19 13:43:20 +01:00
dependabot[bot]
b183ca33b5
Bump click from 8.2.1 to 8.3.0 ( #696 )
...
Bumps [click](https://github.com/pallets/click ) from 8.2.1 to 8.3.0.
- [Release notes](https://github.com/pallets/click/releases )
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst )
- [Commits](https://github.com/pallets/click/compare/8.2.1...8.3.0 )
---
updated-dependencies:
- dependency-name: click
dependency-version: 8.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Donncha Ó Cearbhaill <donncha.ocearbhaill@amnesty.org >
2025-12-19 13:17:12 +01:00
dependabot[bot]
a2c9e0c6cf
Bump simplejson from 3.20.1 to 3.20.2 ( #699 )
...
Bumps [simplejson](https://github.com/simplejson/simplejson ) from 3.20.1 to 3.20.2.
- [Release notes](https://github.com/simplejson/simplejson/releases )
- [Changelog](https://github.com/simplejson/simplejson/blob/master/CHANGES.txt )
- [Commits](https://github.com/simplejson/simplejson/compare/v3.20.1...v3.20.2 )
---
updated-dependencies:
- dependency-name: simplejson
dependency-version: 3.20.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Donncha Ó Cearbhaill <donncha.ocearbhaill@amnesty.org >
2025-12-19 13:14:39 +01:00
Donncha Ó Cearbhaill
4bfad1f87d
Fix outdated security contact point ( #725 )
2025-12-19 13:12:23 +01:00
dependabot[bot]
c3dc3d96d5
Bump cryptography from 45.0.6 to 46.0.3 ( #709 )
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 45.0.6 to 46.0.3.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/45.0.6...46.0.3 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 46.0.3
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Donncha Ó Cearbhaill <donncha.ocearbhaill@amnesty.org >
2025-12-19 13:09:59 +01:00
Donncha Ó Cearbhaill
afab222f93
Run CI tests against Python3.14 too ( #724 )
...
Resolves #707
2025-12-19 12:54:29 +01:00
besendorf
5a1166c416
Deprecate check-adb and recommend AndroidQF ( #723 )
...
Co-authored-by: Donncha Ó Cearbhaill <donncha.ocearbhaill@amnesty.org >
2025-12-19 12:44:43 +01:00
dependabot[bot]
dd3d665bea
Bump requests from 2.32.4 to 2.32.5 ( #684 )
...
Bumps [requests](https://github.com/psf/requests ) from 2.32.4 to 2.32.5.
- [Release notes](https://github.com/psf/requests/releases )
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md )
- [Commits](https://github.com/psf/requests/compare/v2.32.4...v2.32.5 )
---
updated-dependencies:
- dependency-name: requests
dependency-version: 2.32.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Donncha Ó Cearbhaill <donncha.ocearbhaill@amnesty.org >
2025-12-19 12:42:20 +01:00
dependabot[bot]
5c3b92aeee
Bump pydantic from 2.11.7 to 2.12.3 ( #708 )
...
Bumps [pydantic](https://github.com/pydantic/pydantic ) from 2.11.7 to 2.12.3.
- [Release notes](https://github.com/pydantic/pydantic/releases )
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md )
- [Commits](https://github.com/pydantic/pydantic/compare/v2.11.7...v2.12.3 )
---
updated-dependencies:
- dependency-name: pydantic
dependency-version: 2.12.3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-17 19:28:36 +01:00
r-tx
d7e058af43
add missing iPhone 16 and 17 models ( #717 )
...
Co-authored-by: r-tx <r-tx@users.noreply.github.com >
2025-12-15 09:48:11 +01:00
github-actions[bot]
cdbaad94cc
Add new iOS versions and build numbers ( #722 )
...
Co-authored-by: DonnchaC <DonnchaC@users.noreply.github.com >
2025-12-15 09:43:23 +01:00
Janik Besendorf
801c464492
- Remove timeline_detected and route to alertstore
2025-11-07 19:05:39 +01:00
Janik Besendorf
6d1d499c4e
.
2025-11-07 18:52:31 +01:00
Janik Besendorf
cc7781e255
move indicator_match to alert object
2025-11-07 18:50:35 +01:00
Janik Besendorf
c6837a455a
update alerts.py
2025-11-07 18:25:20 +01:00
Janik Besendorf
b1f0a2de06
update alerts.py
2025-11-07 18:22:08 +01:00
Janik Besendorf
d259ab4810
Remove slug from alertstore calls
2025-11-07 18:20:36 +01:00
Janik Besendorf
d4b970c7c0
Log alerts on add
2025-11-07 18:07:41 +01:00
Janik Besendorf
4b6a101cc7
Fix remaining test errors
...
- Add log_latest() call in root_binaries to log each alert
- Fix UnboundLocalError in cmd_check_androidqf by initializing bugreport variable
- Remove incorrect backup.close() call since load_backup() returns bytes
- Remove duplicate from_ab method in cmd_check_backup that was using old attributes
2025-11-07 17:14:47 +01:00
Janik Besendorf
5b1f4df7a4
Fix alertstore method calls - use high() instead of warning()
2025-11-07 16:49:05 +01:00
Janik Besendorf
301582d7dd
Update tests to use alertstore instead of detected attribute
2025-11-07 16:46:20 +01:00
Janik Besendorf
af8c56675b
Fix root_binaries and mounts modules to use alertstore
2025-11-07 16:42:09 +01:00
Janik Besendorf
2302e74a86
Merge refactor/structured-alerting into v2
...
Resolved conflicts:
- pyproject.toml: Used v2 pinned dependency versions
- Removed cmd_check_adb.py (deleted in refactor branch)
- Updated all command files to include disable_version_check and disable_indicator_check flags
- Adopted new AlertStore system from refactor branch
- Updated version to 3.0.0
- Kept VirusTotal functionality commented out
- Consolidated imports and module lists
- Adopted refactor branch's simplified JSON loading
- Updated iOS modules to use new alertstore approach
2025-11-07 16:38:53 +01:00
github-actions[bot]
981371bd8b
Add new iOS versions and build numbers ( #714 )
...
Co-authored-by: DonnchaC <DonnchaC@users.noreply.github.com >
2025-11-06 19:18:07 +01:00
github-actions[bot]
c7d00978c6
Add new iOS versions and build numbers ( #712 )
...
Co-authored-by: DonnchaC <DonnchaC@users.noreply.github.com >
2025-11-04 19:28:19 +01:00
Donncha Ó Cearbhaill
339a1d0712
Deduplicate ADB AndroidQF and other modules ( #606 )
...
* Run bugreport and backup modules during check-androidqf
Adding support to automatically run ADB backup and bugreport modules
automatically when running the check-androidqf command. This is a first
step to deduplicate the code for Android modules.
* Deduplicate modules which are run by the sub-commands.
* Raise the proper NoAndroidQFBackup exception when a back-up isn't found
* add missing import
* Fix imports and remove duplicate hashes param
* Rename from_folder to from_dir in tests
---------
Co-authored-by: besendorf <janik@besendorf.org >
2025-10-31 13:46:33 +01:00
besendorf
7009cddc8c
webkit session resource: fail gracefully when date conversion fails ( #664 )
...
* webkit session resource: fail gracefully when date conversion fails
* fix syntax
2025-10-23 15:19:08 +02:00
besendorf
9b4d10139c
Add Options to disable update checks ( #674 )
...
* reduce update check timeouts to 5s
* add error hadnling for Update checks
* Add CLI flags to disable version and indicator checks
* ruff syntax fix
* fix tests
2025-10-23 15:13:36 +02:00
besendorf
b795ea3129
Add root_binaries androidqf module ( #676 )
...
* Add root_binaries androidqf module
* Fix AndroidQF file count test
* fix ruff
---------
Co-authored-by: User <user@DESKTOP-3T8T346.localdomain >
2025-10-23 15:12:01 +02:00
besendorf
5be5ffbf49
add mounts module for androidqf ( #710 )
...
* add mounts module for androidqf
* adds test for mounts module
2025-10-23 15:09:37 +02:00
besendorf
2701490501
fix tombstone unpack parsing bug ( #711 )
2025-10-23 15:08:01 +02:00
besendorf
779842567d
Make revision field a string in TombstoneCrash model to fix error where ( #702 )
...
there were characters in the revision field
2025-10-09 11:28:47 +02:00
Donncha Ó Cearbhaill
e9e621640b
Close open archive (zip/tar) file handles
2025-10-06 10:07:16 +02:00
Donncha Ó Cearbhaill
05ad7d274c
Fix profile events log line
2025-10-06 09:50:43 +02:00
Donncha Ó Cearbhaill
70d646af78
Quote STIX path in log line
2025-10-06 09:50:24 +02:00
besendorf
d3cc8cf590
Add tzdata dependency ( #700 )
...
* Add tzdata dependency
* fix tzdata name
2025-10-05 13:29:54 +02:00
github-actions[bot]
b8a42eaf8f
Add new iOS versions and build numbers ( #698 )
...
Co-authored-by: DonnchaC <DonnchaC@users.noreply.github.com >
2025-09-29 20:42:12 +02:00
dependabot[bot]
62b880fbff
Bump mkdocstrings from 0.30.0 to 0.30.1 ( #697 )
...
Bumps [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings ) from 0.30.0 to 0.30.1.
- [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases )
- [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md )
- [Commits](https://github.com/mkdocstrings/mkdocstrings/compare/0.30.0...0.30.1 )
---
updated-dependencies:
- dependency-name: mkdocstrings
dependency-version: 0.30.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-22 20:03:04 +02:00
besendorf
0778d448df
make virustotal check also work with androidqf extractions ( #685 )
2025-09-19 07:31:17 +02:00
github-actions[bot]
f020655a1a
Add new iOS versions and build numbers ( #693 )
...
Co-authored-by: DonnchaC <DonnchaC@users.noreply.github.com >
2025-09-16 15:52:32 +02:00
github-actions[bot]
91c34e6664
Add new iOS versions and build numbers ( #692 )
...
Co-authored-by: DonnchaC <DonnchaC@users.noreply.github.com >
2025-09-15 20:13:40 +02:00
dependabot[bot]
b4a8dd226a
Bump mkdocs-material from 9.6.18 to 9.6.20 ( #691 )
...
Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material ) from 9.6.18 to 9.6.20.
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases )
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG )
- [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.18...9.6.20 )
---
updated-dependencies:
- dependency-name: mkdocs-material
dependency-version: 9.6.20
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-15 19:40:29 +02:00
dependabot[bot]
88213e12c9
Bump mkdocs-autorefs from 1.4.2 to 1.4.3 ( #686 )
...
Bumps [mkdocs-autorefs](https://github.com/mkdocstrings/autorefs ) from 1.4.2 to 1.4.3.
- [Release notes](https://github.com/mkdocstrings/autorefs/releases )
- [Changelog](https://github.com/mkdocstrings/autorefs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/mkdocstrings/autorefs/compare/1.4.2...1.4.3 )
---
updated-dependencies:
- dependency-name: mkdocs-autorefs
dependency-version: 1.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-05 18:30:36 +02:00
r-tx
f75b8e186a
add iOS 18.6.2 ( #682 )
...
* iOS 18.6.2
* iOS 18.6.2
---------
Co-authored-by: r-tx <r-tx@users.noreply.github.com >
Co-authored-by: Tek <tek@randhome.io >
2025-08-26 13:52:55 +02:00
dependabot[bot]
5babc1fcf3
Bump mkdocs-material from 9.6.17 to 9.6.18 ( #683 )
...
Bumps [mkdocs-material](https://github.com/squidfunk/mkdocs-material ) from 9.6.17 to 9.6.18.
- [Release notes](https://github.com/squidfunk/mkdocs-material/releases )
- [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG )
- [Commits](https://github.com/squidfunk/mkdocs-material/compare/9.6.17...9.6.18 )
---
updated-dependencies:
- dependency-name: mkdocs-material
dependency-version: 9.6.18
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-26 11:25:22 +02:00