[Mobiusft-list] Mobius Forensic Toolkit 1.1 released

[Eduardo]

Hi,

I would like to announce a new release of Mobius Forensic Toolkit. The registry classes automatically decrypt both UserAssist keys and Protected Storage System Provider (PSSP) keys. Both keys can be browsed with the hive extension. See the ChangeLog file for a complete list of changes. Main changes are:

• SHA-1 cryptographic hash function implemented
• ROT-13 cryptographic cipher algorithm implemented
• Libmobius: Automatically decodes UserAssist registry keys
• Libmobius: Automatically decrypts Protected Storage System Provider (PSSP) registry keys
• Libmobius: New functions for registry and registry_key classes: get_key_by_mask, get_value_by_mask and get_data_by_mask
• Unification of Python API under one library

You can download the latest version at http://www.nongnu.org/mobiusft.

All the best,

Eduardo Aguiar