Commit Graph

Select branches

Hide Pull Requests

Te-k-feature/ios-check-usb

Te-k-patch-1

accessibility_enabled

add-shell-completion-command

agent/add-sysdiagnose-command-scoping

auto/add-new-ios-releases

backup_extraction

besendorf-patch-1

besendorf-patch-2

besendorf-patch-3

besendorf-patch-4

bugfix/ioc-import

bugfix/tombstones

ci/run-mypy-on-pull-requests

dependabot/uv/betterproto2-0.10.0

dependabot/uv/rich-15.0.0

dependabot/uv/simplejson-4.1.1

dependabot/uv/types-pyyaml-6.0.12.20260518

dependabot/uv/types-requests-2.33.0.20260518

dev_deps

docs/network-access-options

docs/recommend-pymobiledevice3

feat/bugreport-schema-v2

feat/output-schemas

feat/whatsapp-contacts-module

feature/add-package-detections

feature/android-browser-history

feature/android-sub-module-loading

feature/androidqf-adb-host-key-alerts

feature/anonymous-metrics

feature/build-arm64-docker-images

feature/check-iocs-auto-modules

feature/check-iocs-module-lists

feature/cli-plugin-enhancements

feature/command_completion_docs

feature/custom-cli-commands

feature/custom-module-loading

feature/deduplicate-adb-aqf-modules

feature/deduplicate-androidqf-sms

feature/development-docs

feature/document-ios-docker-usbmuxd

feature/fast-cli-startup

feature/fix-module-audit-findings

feature/fix-text-tombstone-crashing-thread

feature/installed-module-packages

feature/ios-app

feature/module-dependency-ordering

feature/module-replaces

feature/monthly-releases

feature/mvt-cli

feature/network-interface-parser

feature/parallel-module-execution

feature/parallel-url-checks

feature/plugin-api

feature/plugin-cli-neutral-group

feature/plugin-cli-registration

feature/plugin-config

feature/plugin-dependency-skip

feature/plugin-updates

feature/plugin-verbose-logging

feature/post-run-detections

feature/skip-google-maps-short-urls

feature/structured-alerting

feature/update-github-actions

feature/updates_downgrades

feature/url-logging

fix-ios-check-backup-path

fix-malformed-androidqf-backup

fix-mms

fix/alert-timestamps

fix/betterproto2-migration

fix/bugreport-parser-coverage

fix/coverage-logging

fix/create-auto-pr-as-draft-yaml

fix/dependabot-vulnerabilities

fix/docker-adb-generation

fix/dumpsys-accessibility-alert

fix/dumpsys-battery-daily-order

fix/dumpsys-receivers-misindented-actions

fix/enforce-network-access-allowed

fix/install_non_market_apps

fix/intrusion-log-event-id

fix/ios-data-dependencies

fix/ios-parser-field-coverage

fix/parse-dumpsys-package-system-flag

fix/parse-package-installer

fix/pinstorage-key-generation-warning

fix/preserve-tombstone-causes

fix/receiver-app-id-matching

fix/safari_browserstate

fix/scope-package-user-fields

fix/settings-env-persist

fix/shutdown-log-rotations

fix/stix2-hash-key-normalization

fix/tcc

fix/timeline-append-mode

fix/tombstone-defaults

fix/tombstone-int

fix/tombstone_values

fix/vt

fix/webkit_session_resource_error_handling

fix_sms

fix_tests

fix_tombstone

intrusion-logging

ios-version

ios_lockdown

main

makitos666-patch-1

mounts

refactor/structured-alerting

release/v2026.5.12

roaree-patch-1

roaree-patch-2

root_binaries

tmp/timeline-improvements

todos

tzdata-dependency

update-check

uv-dependency-cooldown

warn-encrypted-backup

wip/android-dumpstate-parser

#102

#109

#11

#110

#111

#116

#124

#126

#129

#13

#131

#134

#135

#137

#139

#140

#141

#147

#148

#15

#155

#16

#160

#162

#169

#170

#172

#173

#174

#176

#177

#178

#179

#18

#181

#183

#184

#185

#186

#187

#188

#19

#194

#196

#20

#202

#205

#206

#209

#21

#210

#213

#219

#222

#229

#23

#231

#235

#236

#24

#241

#244

#246

#247

#251

#259

#266

#271

#274

#279

#280

#282

#287

#288

#289

#297

#298

#299

#30

#300

#304

#305

#306

#31

#326

#327

#332

#337

#341

#345

#346

#347

#349

#356

#359

#361

#363

#364

#367

#368

#369

#370

#371

#372

#373

#377

#378

#378

#379

#380

#381

#385

#386

#387

#388

#390

#391

#393

#394

#399

#400

#404

#405

#406

#409

#41

#411

#412

#413

#414

#416

#418

#424

#427

#428

#430

#431

#432

#433

#435

#436

#437

#438

#439

#440

#441

#442

#444

#445

#449

#451

#455

#460

#461

#464

#465

#468

#472

#473

#476

#477

#479

#481

#483

#485

#486

#488

#489

#490

#492

#493

#498

#499

#501

#502

#504

#506

#507

#509

#514

#516

#521

#523

#527

#530

#532

#533

#541

#542

#543

#544

#546

#547

#549

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#562

#563

#566

#567

#568

#569

#570

#572

#580

#583

#584

#585

#586

#587

#589

#592

#593

#594

#595

#597

#598

#599

#6

#600

#601

#602

#603

#605

#606

#607

#609

#610

#611

#615

#617

#618

#619

#620

#622

#623

#625

#626

#630

#632

#635

#636

#637

#640

#641

#642

#644

#645

#646

#647

#648

#649

#651

#652

#653

#653

#655

#656

#658

#659

#660

#661

#662

#664

#665

#670

#671

#672

#673

#674

#675

#676

#678

#679

#681

#682

#683

#684

#685

#686

#687

#688

#689

#690

#691

#692

#693

#694

#695

#696

#697

#698

#699

#7

#700

#702

#703

#704

#706

#708

#709

#710

#711

#712

#714

#715

#716

#717

#721

#722

#723

#724

#725

#726

#727

#728

#729

#730

#731

#732

#733

#733

#734

#736

#737

#737

#738

#739

#740

#741

#742

#743

#746

#747

#749

#750

#751

#752

#753

#754

#755

#756

#758

#759

#76

#760

#761

#762

#763

#765

#767

#768

#770

#771

#772

#773

#773

#774

#775

#776

#777

#778

#779

#780

#781

#782

#783

#784

#785

#787

#788

#789

#790

#791

#792

#793

#794

#795

#796

#798

#80

#800

#801

#805

#806

#807

#808

#810

#811

#812

#812

#814

#815

#816

#817

#818

#818

#819

#819

#820

#820

#821

#821

#822

#822

#824

#825

#83

#832

#834

#835

#836

#837

#839

#839

#84

#840

#841

#842

#843

#844

#846

#848

#85

#850

#852

#853

#854

#855

#856

#857

#860

#861

#863

#864

#865

#866

#868

#870

#870

#871

#872

#874

#875

#877

#877

#878

#879

#880

#881

#882

#883

#884

#884

#885

#885

#886

#886

#890

#891

#892

#893

#894

#895

#896

#897

#898

#899

#900

#901

#902

#903

#905

#907

#908

#908

#909

#910

#911

#911

#912

#913

#914

#916

#917

#919

#920

#921

#922

#923

#924

#925

#925

#95

#98

v1.0.11

v1.0.13

v1.0.14

v1.0.15

v1.0.16

v1.0.17

v1.1.0

v1.2.0

v1.2.1

v1.2.10

v1.2.11

v1.2.12

v1.2.13

v1.2.14

v1.2.2

v1.2.3

v1.2.5

v1.2.6

v1.2.7

v1.2.8

v1.2.9

v1.3

v1.3.1

v1.3.2

v1.4.0

v1.4.1

v1.4.10

v1.4.11

v1.4.2

v1.4.3

v1.4.4

v1.4.5

v1.4.6

v1.4.7

v1.4.8

v1.4.9

v1.5.1

v1.5.2

v1.5.3

v1.5.4

v1.5.5

v2.0

v2.1

v2.1.1

v2.1.2

v2.1.3

v2.1.4

v2.1.5

v2.1.6

v2.2

v2.2.1

v2.2.2

v2.2.3

v2.2.4

v2.2.5

v2.2.6

v2.3.0

v2.4.0

v2.4.1

v2.4.2

v2.4.3

v2.4.4

v2.4.5

v2.5.0

v2.5.1

v2.5.2

v2.5.3

v2.5.4

v2.6.0

v2.6.1

v2.7.0

v2026.4.28

v2026.5.12

v2026.7.29

v2026.9.1

v2026.9.7

Mono Color

• cb25137423 Load installed module packages via entry points Donncha Ó Cearbhaill 2026-08-19 14:03:09 +02:00
• 982c0fe34f Reduce duplicate InteractionC timeline events Donncha Ó Cearbhaill 2026-08-19 13:47:38 +02:00
• c6bf1a23b5 Merge branch 'main' into feat/whatsapp-contacts-module Donncha Ó Cearbhaill 2026-08-19 13:24:27 +02:00
• 06a949dafe Resolve WhatsApp LID chat identifiers via the LID pair table Donncha Ó Cearbhaill 2026-08-19 13:06:41 +02:00
• 07066feba9 Add first and last interaction timeline events for WhatsApp chats Donncha Ó Cearbhaill 2026-08-19 12:02:14 +02:00
• 6b0c439d1c Add timeline events for all WhatsApp contact timestamps Donncha Ó Cearbhaill 2026-08-19 11:53:50 +02:00
• a92ec7f963 Build Docker images for ARM64 (#880) besendorfandDonncha Ó Cearbhaill 2026-08-19 11:46:48 +02:00
• d72e6e00de Merge branch 'main' into feature/build-arm64-docker-images feature/build-arm64-docker-images Donncha Ó Cearbhaill 2026-08-19 11:44:22 +02:00
• 10a5bccbe0 Fix usability nits in the Docker images (#881) Donncha Ó Cearbhaill 2026-08-19 11:43:40 +02:00
• d02b9676c8 Fix InteractionC contact resolution and resolve WhatsApp LIDs to contacts Donncha Ó Cearbhaill 2026-08-18 21:34:15 +02:00
• 5c6bd65495 Add WhatsappContacts module to extract WhatsApp disappearing messages state Donncha Ó Cearbhaill 2026-08-18 14:57:58 +02:00
• 62ae4aa2cb Add useful forensic analysis tools fix/docker-adb-generation Donncha Ó Cearbhaill 2026-08-18 14:35:45 +02:00
• c4c6cc2d55 Fix error in ADB key generation commmand Donncha Ó Cearbhaill 2026-08-18 14:20:11 +02:00
• 83cca3fdca Build Docker images for ARM64 Janik Besendorf 2026-08-18 13:20:19 +02:00
• 3b21c9347c Add new iOS versions and build numbers (#879) github-actions[bot]andDonnchaC 2026-08-18 07:04:35 +02:00
• 08e076b71e Group custom docs under development Janik Besendorf 2026-08-17 18:11:09 +02:00
• c1eac8789b Explain AppOps alert timestamp selection Janik Besendorf 2026-08-17 14:31:35 +02:00
• 4a33173eff Merge branch 'main' into fix/alert-timestamps besendorf 2026-08-17 14:25:38 +02:00
• c5d7f5a1d0 Parse Android browser history databases feature/android-browser-history Janik Besendorf 2026-08-17 14:12:50 +02:00
• 0fdc2c34b0 Document iOS device access from Docker (#875) besendorf 2026-08-17 13:42:22 +02:00
• 72849d71ee Simplify docker.md instructions feature/document-ios-docker-usbmuxd besendorf 2026-08-17 13:38:29 +02:00
• 87b0445ab7 Document iOS device access from Docker Janik Besendorf 2026-08-17 13:32:52 +02:00
• 545ac19158 Restore concurrent backup decryption Janik Besendorf 2026-08-17 13:24:30 +02:00
• 2de8312349 Merge main and fix encrypted backup extraction Codex 2026-08-16 22:39:08 +05:30
• 0ee25edf0a Fix dumpsys package system flag parsing (#874) besendorf 2026-08-14 15:58:05 +02:00
• 6bb49fb573 Fix dumpsys package system flag parsing fix/parse-dumpsys-package-system-flag Janik Besendorf 2026-08-14 15:56:51 +02:00
• fa24b5465b Scope package fields to the primary user (#872) besendorf 2026-08-14 14:33:28 +02:00
• 3648905d38 Scope package fields to the primary user fix/scope-package-user-fields Janik Besendorf 2026-08-14 14:20:22 +02:00
• 0123bf6e59 Add parsed timestamps to alerts Janik Besendorf 2026-08-14 11:37:38 +02:00
• 683b8ba133 Parse package installer from bugreports (#868) besendorf 2026-08-14 09:40:34 +02:00
• bc7d0fcec3 Parse package installer from bugreports fix/parse-package-installer Janik Besendorf 2026-08-14 09:39:16 +02:00
• 7b64463727 Update GitHub Actions (#866) besendorf 2026-08-12 15:42:15 +02:00
• 3f83d9ba6f Update GitHub Actions feature/update-github-actions Janik Besendorf 2026-08-12 15:37:18 +02:00
• 47fd771b2a Add new iOS versions and build numbers (#865) github-actions[bot]andDonnchaC 2026-08-11 10:07:52 +02:00
• 8123db26d9 Fix iOS update workflow and refresh dependencies (#864) besendorf 2026-08-10 22:06:15 +02:00
• 3a90c0934a Fix iOS update workflow and refresh dependencies fix/ios-data-dependencies Janik Besendorf 2026-08-10 21:33:24 +02:00
• d92a60c9be Preserve tombstone crash causes (#863) besendorf 2026-08-10 20:59:56 +02:00
• 8a31bc94c0 Preserve tombstone crash causes fix/preserve-tombstone-causes Janik Besendorf 2026-08-10 20:57:56 +02:00
• 0b48d9fe1d Speed up compressed sysdiagnose analysis (#861) besendorf 2026-08-07 09:07:33 +02:00
• 067f053627 Add extensible CLI commands (#853) besendorf 2026-08-05 23:30:28 +02:00
• f7e48f0c65 Handle plugin SystemExit failures feature/custom-cli-commands Janik Besendorf 2026-08-05 23:28:54 +02:00
• a66eeaa089 Merge branch 'main' into feature/custom-cli-commands besendorf 2026-08-05 23:21:38 +02:00
• 93b7fb5232 Store message URLs in analysis output (#856) besendorf 2026-08-05 23:21:14 +02:00
• f5b7045b03 Merge main into feature/url-logging feature/url-logging Janik Besendorf 2026-08-05 23:17:56 +02:00
• 8617e0bf54 Alert on AndroidQF trusted ADB keys (#860) besendorf 2026-08-05 17:36:49 +02:00
• c2fbde7c18 Alert on AndroidQF trusted ADB keys feature/androidqf-adb-host-key-alerts Janik Besendorf 2026-08-05 16:50:37 +02:00
• c261316d7a Store message URLs in analysis output Janik Besendorf 2026-07-29 16:20:04 +02:00
• 53fb12aee8 Correct version.py (#855) v2026.7.29 Rory Flynn 2026-07-29 16:08:42 +02:00
• 9ab7471acd Correct version.py roaree-patch-2 Rory Flynn 2026-07-29 16:07:07 +02:00
• 8140e350f7 Update version.py (#854) Rory Flynn 2026-07-29 13:57:34 +02:00
• 30ebf3d9af Update version.py roaree-patch-1 Rory Flynn 2026-07-29 13:54:39 +02:00
• 8685d1afcf Add extensible CLI commands Janik Besendorf 2026-07-29 09:40:50 +02:00
• f483223e23 Add iOS sysdiagnose checking (#832) besendorf 2026-07-28 18:59:58 +02:00
• 8c5cd2620a Merge branch 'main' into agent/add-sysdiagnose-command-scoping agent/add-sysdiagnose-command-scoping besendorf 2026-07-28 18:59:09 +02:00
• 2dfe3cbcb1 Fix module audit findings (#850) besendorf 2026-07-28 18:58:46 +02:00
• 194b7a60eb Merge branch 'main' into feature/fix-module-audit-findings feature/fix-module-audit-findings besendorf 2026-07-28 18:58:02 +02:00
• 2459d5c223 Always parse paired tombstones Janik Besendorf 2026-07-28 18:56:06 +02:00
• 3eff0c550d Handle mis-indented dumpsys receiver actions (#852) besendorf 2026-07-28 18:34:13 +02:00
• 3c11c71daa Handle mis-indented dumpsys receiver actions fix/dumpsys-receivers-misindented-actions Janik Besendorf 2026-07-28 18:32:02 +02:00
• 9a0cc62cc3 Fix module audit findings Janik Besendorf 2026-07-28 11:10:52 +02:00
• 797411e1e5 Fix text tombstone crashing thread parsing (#848) besendorf 2026-07-27 17:58:34 +02:00
• b6adff5e97 Fix text tombstone crashing thread parsing feature/fix-text-tombstone-crashing-thread Janik Besendorf 2026-07-27 17:54:48 +02:00
• 84df51c518 Scan Safari profile databases for history and browser state (#846) 3 people 2026-07-27 16:06:44 +03:00
• a6c3a805d8 Parallelize URL indicator checks (#844) besendorf 2026-07-27 15:03:02 +02:00
• 5d82f01a79 Parallelize URL indicator checks feature/parallel-url-checks Janik Besendorf 2026-07-19 17:28:27 +02:00
• 123c9081ed Skip resolving Google Maps short URLs (#843) besendorf 2026-07-19 17:13:57 +02:00
• ff002c5129 Skip resolving Google Maps short URLs feature/skip-google-maps-short-urls Janik Besendorf 2026-07-19 17:11:12 +02:00
• 5ed8b3c1a5 fix: terminate dumpsys adb multiline values at structural lines (#842) FelixandJanik Besendorf 2026-07-17 18:25:47 +02:00
• 2fe7f4e261 Make parallel log grouping test order-independent feature/parallel-module-execution Janik Besendorf 2026-07-16 22:38:55 +02:00
• 361bc72a4e Cache Android bugreport dumpstate sections Janik Besendorf 2026-07-15 23:51:53 +02:00
• 9d71661f55 Run extraction modules in parallel Janik Besendorf 2026-07-15 09:40:18 +02:00
• afcfda4720 Deduplicate AndroidQF SMS analysis (#837) besendorf 2026-07-15 09:09:04 +02:00
• cc27b40aa0 Deduplicate AndroidQF SMS analysis feature/deduplicate-androidqf-sms Janik Besendorf 2026-07-15 09:03:58 +02:00
• 911115b0c8 Match receiver indicators by package ID (#836) besendorf 2026-07-15 08:32:13 +02:00
• 26092a7758 Match receiver indicators by package ID fix/receiver-app-id-matching Janik Besendorf 2026-07-15 08:30:05 +02:00
• c806fd8d61 Support rotated iOS shutdown logs (#834) besendorf 2026-07-14 23:27:44 +02:00
• eb778ab894 Merge branch 'main' into fix/shutdown-log-rotations fix/shutdown-log-rotations besendorf 2026-07-14 23:24:13 +02:00
• 516ba06cf7 Suppress benign PinStorage key generation warning (#835) besendorf 2026-07-14 23:20:53 +02:00
• eaa7b084e2 Suppress benign PinStorage key generation warning fix/pinstorage-key-generation-warning Janik Besendorf 2026-07-14 23:10:07 +02:00
• 5945f1e956 Support rotated iOS shutdown logs Janik Besendorf 2026-07-14 22:46:56 +02:00
• 1532578b39 Validate iOS backup path before checks (#825) besendorf 2026-07-14 21:58:46 +02:00
• d868f58c74 Clarify documentation navigation Janik Besendorf 2026-07-14 21:47:12 +02:00
• f2b58d4b73 Add iOS sysdiagnose checking Janik Besendorf 2026-07-14 21:42:03 +02:00
• dd8434cc16 Fix custom module test backup fixture fix-ios-check-backup-path Janik Besendorf 2026-07-14 21:27:59 +02:00
• 1ad80d4864 Merge branch 'main' into fix-ios-check-backup-path besendorf 2026-07-14 21:23:11 +02:00
• f5b0a3cd91 WIP: Addition of a timer to virustotal checks (#593) Nimrod B.andJanik Besendorf 2026-07-01 12:36:56 +02:00
• a18e632ec8 Add shell completion command (#817) besendorf 2026-07-01 12:35:21 +02:00
• c57179a62c Merge branch 'main' into add-shell-completion-command add-shell-completion-command besendorf 2026-07-01 12:34:36 +02:00
• 2689176c0e Add custom module loading (#816) besendorf 2026-07-01 12:33:38 +02:00
• 415d9b0e29 Merge branch 'main' into feature/custom-module-loading feature/custom-module-loading besendorf 2026-07-01 12:30:35 +02:00
• 638937e838 Handle malformed AndroidQF backups (#824) besendorf 2026-06-24 12:41:00 +02:00
• 6491857bb1 Fix iOS backup path mypy typing Janik Besendorf 2026-06-23 18:06:16 +02:00
• fbd001298b Validate iOS backup path before checks Janik Besendorf 2026-06-23 18:03:24 +02:00
• 7e1992a04b Handle malformed AndroidQF backups fix-malformed-androidqf-backup Janik Besendorf 2026-06-23 16:58:40 +02:00
• 7002d5acb8 Bump types-pyyaml from 6.0.12.20260408 to 6.0.12.20260518 dependabot/uv/types-pyyaml-6.0.12.20260518 dependabot[bot] 2026-06-20 16:13:18 +00:00
• 0b8e0dd59c Bump betterproto2 from 0.9.1 to 0.10.0 dependabot/uv/betterproto2-0.10.0 dependabot[bot] 2026-06-20 16:13:10 +00:00
• 9945720b6e Bump simplejson from 3.20.2 to 4.1.1 dependabot/uv/simplejson-4.1.1 dependabot[bot] 2026-06-20 16:12:56 +00:00
• 245a714b6d Bump types-requests from 2.33.0.20260508 to 2.33.0.20260518 dependabot/uv/types-requests-2.33.0.20260518 dependabot[bot] 2026-06-20 16:12:47 +00:00
• 2575257cbb Bump rich from 14.3.3 to 15.0.0 dependabot/uv/rich-15.0.0 dependabot[bot] 2026-06-20 16:12:39 +00:00
• f95f7b1283 Add shell completion command Janik Besendorf 2026-06-19 16:51:01 +02:00