Projects / Mobius Forensic Toolkit

Download

More Information
Mobius Forensic Toolkit

Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files for easy integration with other tools.

Tags	Security Forensics
Licenses	GPLv2
Operating Systems	OS Independent
Implementation	Python

Tweet this project Short link

Release tags

All releases

Recent releases

0.5.4

15 Aug 2010 15:38

Changes: Extensions are now deployed in .mobius files. This release features three new extensions: Datasource SCSI, for drag'n'drop of /dev/sd* files directly into case, Data Viewer, a hexviewer for case items, and Extension Manager. Floppy Imager has been improved and uses direct I/O only. Minor improvements were made.

0.5.3

28 Mar 2010 14:17

Changes: This release introduces the Hive extension, a registry file browser/viewer. XML pickle now encodes arbitrary dictionaries and Python objects that have circular and self references.

0.5.2

19 Feb 2010 23:45

Changes: The extension Datasource Solo provides support to ICS Solo III image files. Case Viewer has a toolbutton to run reports. The Mobius tutorial features a new chapter on generating and running reports. Datasource-talon supports v2.40 of the software. Minor improvements were made.

0.5.1

24 Jan 2010 14:23

Changes: The Datasource-EWF extension provides read support for EWF image files.

10 Dec 2009 16:17

Changes: Case items may have an associated datasource, which represents a stream of bytes. This release also introduces Data Sourcerer, Datasource Model, Datasource Raw, and Datasource Talon extensions. Extensions now have callbacks.