v2.6.0

mvt-project/mvtv2.6.0Jan 27, 2025by roaree

Upgrading?

AI Summary

A major update focusing on Docker optimization, AndroidQF integration, expanded STIX2 support, and general code quality improvements.

Key Highlights

  • Docker improvements including multistage builds, separate OS images, and workflow refinements.
  • Added AndroidQF packages and files modules for Android forensic analysis.
  • Enhanced STIX2 support including directory searching, validation, and APK certificate hash IOCs.
  • Improved CLI help messages and error reporting for better maintainability.

New Features

  • AndroidQF packages module
  • AndroidQF files module
  • STIX2 directory search
  • APK certificate hash IOC support
  • Basic IP indicator support
  • ADB state parser
  • SQLite DB recovery
  • Uninstalled apps parser

Full Release Notes

## What's Changed
* Fixes for failing CI by @roaree in https://github.com/mvt-project/mvt/pull/507
* Add packages module for androidqf by @roaree in https://github.com/mvt-project/mvt/pull/506
* [auto] Update iOS releases and versions by @github-actions in https://github.com/mvt-project/mvt/pull/514
* [auto] Update iOS releases and versions by @github-actions in https://github.com/mvt-project/mvt/pull/521
* [auto] Update iOS releases and versions by @github-actions in https://github.com/mvt-project/mvt/pull/532
* Run black linter on pull requests by @DonnchaC in https://github.com/mvt-project/mvt/pull/543
* Docker improvements (multistage builds, separate os images, and more) by @scribblemaniac in https://github.com/mvt-project/mvt/pull/509
* [auto] Update iOS releases and versions by @github-actions in https://github.com/mvt-project/mvt/pull/549
* Configure project to use pyproject.toml and consistent CI and test tooling by @DonnchaC in https://github.com/mvt-project/mvt/pull/544
* Update deprecated functions and other small changes by @besendorf in https://github.com/mvt-project/mvt/pull/533
* Also search for STIX2 files in directories in MVT_STIX2 by @besendorf in https://github.com/mvt-project/mvt/pull/527
* Improves STIX2 support and testing by @Te-k in https://github.com/mvt-project/mvt/pull/523
* Fixes a bug in Android SMS parsing #526 by @Te-k in https://github.com/mvt-project/mvt/pull/530
* Fix CI badge by @DonnchaC in https://github.com/mvt-project/mvt/pull/552
* Adds recovery of sqlite db when db is opened by @Te-k in https://github.com/mvt-project/mvt/pull/516
* Fixes a minor bug in IOC import by @Te-k in https://github.com/mvt-project/mvt/pull/553
* Adds timeout to update checks by @Te-k in https://github.com/mvt-project/mvt/pull/542
* Refactor CLI help messages to make the CLI code more readable and maintainable. by @DonnchaC in https://github.com/mvt-project/mvt/pull/554
* Fix error reporting for update check failures by @DonnchaC in https://github.com/mvt-project/mvt/pull/555
* Add basic support for IP indicators in MVT by @DonnchaC in https://github.com/mvt-project/mvt/pull/556
* Adds androidqf files module by @Te-k in https://github.com/mvt-project/mvt/pull/541
* Add initial parser for ADB state in Dumpsys by @DonnchaC in https://github.com/mvt-project/mvt/pull/547
* Add support for check APK certificate hash IOCs by @DonnchaC in https://github.com/mvt-project/mvt/pull/557
* Fix crash when handling empty adb key list by @DonnchaC in https://github.com/mvt-project/mvt/pull/558
* Add workflow for building Docker image by @DonnchaC in https://github.com/mvt-project/mvt/pull/559
* Fix action which updates iOS verisons and build numbers by @DonnchaC in https://github.com/mvt-project/mvt/pull/560
* Build Docker image on release rather than on branch by @DonnchaC in https://github.com/mvt-project/mvt/pull/561
* Improve Docker image building and add Docker info to docs by @DonnchaC in https://github.com/mvt-project/mvt/pull/562
* Add additional detections for suspicious packages by @DonnchaC in https://github.com/mvt-project/mvt/pull/563
* [auto] Update iOS releases and versions by @github-actions in https://github.com/mvt-project/mvt/pull/569
* Fix error to due extra equal character in Files detection by @DonnchaC in https://github.com/mvt-project/mvt/pull/570
* [auto] Update iOS releases and versions by @github-actions in https://github.com/mvt-project/mvt/pull/572
* [auto] Update iOS releases and versions by @github-actions in https://github.com/mvt-project/mvt/pull/583
* Update MVT contributor guidelines by @DonnchaC in https://github.com/mvt-project/mvt/pull/584
* Reorganize code in iOS app module by @Te-k in https://github.com/mvt-project/mvt/pull/586
* Add a module to parse uninstalled apps from dumpsys data by @DonnchaC in https://github.com/mvt-project/mvt/pull/587
* [auto] Update iOS releases and versions by @github-actions in https://github.com/mvt-project/mvt/pull/595
* Fixes a bug on recent phones not having WIFI column in net usage by @Te-k in https://github.com/mvt-project/mvt/pull/580
* Autofix for ruff by @roaree in https://github.com/mvt-project/mvt/pull/598
* Add command completion docs by @nimrod-a in https://github.com/mvt-project/mvt/pull/597
* Documentation tweaks by @roaree in https://github.com/mvt-project/mvt/pull/599

## New Contributors
* @scribblemaniac made their first contribution in https://github.com/mvt-project/mvt/pull/509
* @nimrod-a made their first contribution in https://github.com/mvt-project/mvt/pull/597

**Full Changelog**: https://github.com/mvt-project/mvt/compare/v2.5.4...v2.6.0

Related Repositories