And ALEAPP has basic universal parsing for all FCM artefacts plus specialised parsers for some apps we found useful in casework at @CCLForensics previously. AND we can add more! If you find interesting apps using FCM which need further processing let us know!
@willmaddoxbanjo@ABGuitartech This one was dyed and then oiled. I used tru-oil which is itself tinted so it does darken the finish but it gives a really lovely finish that enhances the look of the wood nicely in my opinion. I've used tung oil on a yellow guitar before and that worked fine too.
We've just posted a bunch of new stuff to our (increasingly badly named) repo, giving programmatic access to a bunch more data stores in Chrome/Chromium/Electron plus some new utilities. Highlights in the thread...
#dfir#digitalforensics
https://t.co/Rr6ACuCjiw
ccl_chrome_audit is a research tool which audits multiple data stores based on a regex fragment for the hostname. It's designed to accelerate research into Web apps by quickly showing you what is stored and where - this has been especially useful in some recent work...
@johnson0844 Disclaimer: I made this tool and the company I work for sells it, but genuinely, the one tool I never close is RabbitHole. That's probably because it was built (and continues to be built) to address the challenges I encounter day to day
https://t.co/xkaKSqf07I
#DFIR Android 13 is keeping track of when apps are launched and from where in the database “SimpleStorage” found in USERDATA/data/com.google.android.as/databases/. The table storing the info is “EchoAppLaunchMetrcisEvents” /1
I'll be going through this library and adding type hints everywhere. If you're not familiar with them and you're writing python, I highly recommend that you read up on them and use them - they make detecting and debugging a whole class of logic errors a lot easier.
#dfir python folk - if you use my Chromium indexeddb library, I've just issued a critical patch fixing a bug that can lead to missing records. This will only affect you if you're using the indexeddb library itself, the other stuff is unaffected.
https://t.co/Rr6ACuCR84
What could I have done to help spot it: type hinting the return type of the function would have immediately revealed the cause in my IDE. I write Python pretty much like a typed language these days, and while I had argument type hinting, I didn't have it for returns here.