All pull requests

Pull requests

• Add --exclude argument to YARA to omit file globs

  #1938·0xThiebaut opened Oct 4, 2026·4 tasks done·

  ·
  1

  15

• Add dual boot child detection

  #1936·JSCU-CNI opened Sep 21, 2026Contributor·

  ·
  1

• Implement BitLocker volume auto unlock

  #1933·JSCU-CNI opened Sep 16, 2026Contributor·

  ·
  4

• Decode bytes WUA history titles for KB extraction

  #1932·alan-divd opened Sep 13, 2026·2 tasks done·

  ·
  1

• Handle Windows users without ProfileImagePath

  #1931·alan-divd opened Sep 13, 2026·2 tasks done·

  ·
  1

• Improve Windows domain detection on legacy systems

  #1930·alan-divd opened Sep 13, 2026·3 tasks done·

  ·
  1

• Skip Trend Micro log when pccnt35.log is missing

  #1929·alan-divd opened Sep 13, 2026·2 tasks done·

  ·
  1

• Allow EVTX/EVT scraping when no OS is detected

  #1928·alan-divd opened Sep 13, 2026·3 tasks done·

  ·
  1

• Recover strings after leading null bytes in qfind

  #1927·alan-divd opened Sep 13, 2026·2 tasks done·

  ·
  1

• Add test for drive-relative TargetPath parsing

  #1926·alan-divd opened Sep 13, 2026·2 tasks done·

  ·

• Surface load failures from Target.open_all

  #1925·alan-divd opened Sep 13, 2026·3 tasks done·

  ·
  1

• Skip network history for missing user profiles

  #1924·alan-divd opened Sep 13, 2026·2 tasks done·

  ·
  1

• Strip Unicode bidi marks from Defender MPLog lines

  #1923·alan-divd opened Sep 13, 2026·2 tasks done·

  ·
  1

• Normalize path separators in mft.timeline output

  #1922·alan-divd opened Sep 13, 2026·2 tasks done·

  ·
  1

• Parse CPU type from Mach-O fat binaries

  #1921·alan-divd opened Sep 13, 2026·2 tasks done·

  ·
  1

• Detect ESXi version from /etc/vmware/.buildInfo

  #1920·alan-divd opened Sep 13, 2026·3 tasks done·

  ·
  1

• Include all volumes in DirLoader acquire layouts

  #1919·alan-divd opened Sep 13, 2026·3 tasks done·

  ·
  1

• Detect symlink loops across Filesystem.get() calls

  #1918·alan-divd opened Sep 13, 2026·4 tasks done·

  ·
  1

• Handle NTFS files without a default data stream

  #1917·alan-divd opened Sep 13, 2026·2 tasks done·

  ·
  1

• Handle truncated systemd journal files gracefully

  #1916·alan-divd opened Sep 13, 2026·2 tasks done·

  ·
  1

  2

• Add source field to records of 13 plugins

  #1915·william-billaud opened Sep 7, 2026Contributor·4 tasks done·

  ·
  53

• Fix NTFS relative paths and target-shell tar for Windows targets

  #1914·yunzheng opened Sep 3, 2026Member·4 tasks done·

  ·
  1

  2

• Add target-extract command

  #1912·Matthijsy opened Sep 2, 2026Contributor·4 tasks done·

  ·
  1

  3

• Add --absolute-names to tar command in target-shell

  #1909·JSCU-CNI opened Aug 27, 2026Contributor·

  ·
  7

• Add containerd support

  #1907·JSCU-CNI opened Aug 27, 2026Contributor·

  ·
  1

  20