3.19

What's Changed

• Add username and password options to MQTT loader by @cecinestpasunepipe in #732
• Make ESXi Plugin work without crypto and fix vm_inventory by @Matthijsy in #697
• Fix visual bugs in cyber by @Schamper in #738
• Improve type hint in Defender plugin by @Schamper in #739
• Fix issue with MPLogs by @cecinestpasunepipe in #742
• Use target logger in etc-plugin by @cecinestpasunepipe in #741
• Fix TargetPath instances for configutil.parse by @Miauwkeru in #743
• Fix for using the correct volume name to mount filesystems in Unix by @Schamper in #677
• Fix NoneType AttributeError in firefox extension plugin by @M1ra1B0T in #713
• Fix issue with namespaced plugins in target-shell by @cecinestpasunepipe in #751
• Add retrieval browser data "Snapshots" folder by @mick-314 in #680
• Move helpers from './helpers/ssh.py' into './plugins/apps/ssh/ssh.py' by @Poeloe in #756
• Add support for passwd backup files by @JSCU-CNI in #760
• Improve AnyDesk plugin by @JSCU-CNI in #712
• Fix wrong log logic indicating a sysvol was not found by @pyrco in #762
• Add _target field to firefox and chromium plugins by @DevJoost in #764
• Fix directory argument for lnk plugin by @Poeloe in #757
• Add CSV-ish config parser by @cecinestpasunepipe in #754
• Add support for Android Backups by @Schamper in #419
• Fix UTM loader to skip non-disks by @Schamper in #769
• Add support for mounting by XFS label by @Schamper in #768
• Improve YARA plugin by @JSCU-CNI in #646
• Improve DHCP IP address parsing speed for journal by @JSCU-CNI in #687
• Rewrite Windows USB plugin by @JSCU-CNI in #766
• Add MACB aggregator to MFT by @cecinestpasunepipe in #767
• Add ls parameters to target-fs by @DevJoost in #716
• Fix MdVolumeSystem by @Miauwkeru in #782
• Add option to scan children in YARA plugin by @JSCU-CNI in #780
• Add support for Firefox Oculus VR browser by @Schamper in #752
• Fix ESXi OS when no local state exists yet by @Schamper in #784
• Add --root to the etc plugin by @Miauwkeru in #783
• Add loader option to target-info and target-yara by @JSCU-CNI in #781
• Make adding virtual NTFS filesystem more resilient by @Schamper in #691
• Add target-shell history by @JSCU-CNI in #786
• Cast custom --max-size to integer in yara plugin by @JSCU-CNI in #811
• Yield MFT segments in specified range by @Zawadidone in #672
• Add libvirt loader and QEMU child plugin by @Miauwkeru in #654
• Create base class for the network plugin by @Miauwkeru in #810
• Add symlink support to ZipFilesystem by @Schamper in #808
• Add st_birthtime_ns to fsutil.stat_result by @Poeloe in #814
• Refactor target-shell by @JSCU-CNI in #812
• Add Windows Jumplist plugin by @Zawadidone in #669
• Add Windows Update Agent history by @michoebey in #770
• Add parser for unsaved Windows Notepad tabs by @joost-j in #540
• Move notepad test files to LFS by @Schamper in #825
• Prevent unhandled filesystem exceptions in modify_record by @JSCU-CNI in #737
• Improve parsing speed of walkfs plugins by @JSCU-CNI in #749
• Fix relative symlinks within a mounted filesystem by @Schamper in #832
• Add notice for PyPy users by @cecinestpasunepipe in #829
• Move jumplist test data to correct location by @Schamper in #835
• Add MacOS and Linux paths to TeamViewer plugin by @Poeloe in #834
• Add unit test to ensure Git LFS consistency by @Schamper in #828
• Improve Linux OS detection by @Horofic in #809
• Add mutual exclusive plugin arguments by @cecinestpasunepipe in #836
• Generic locale fixes for RHEL by @JSCU-CNI in #840
• Fix 3.12 ET and datetime deprecation warnings by @JSCU-CNI in #842
• Improve DPAPI plugin by @JSCU-CNI in #711
• Bump the version of flow.record to 3.16 by @pyrco in #843

New Contributors

• @Matthijsy made their first contribution in #697
• @mick-314 made their first contribution in #680
• @michoebey made their first contribution in #770
• @joost-j made their first contribution in #540

Full Changelog: 3.18...3.19