IPED

IPED copied to clipboard

Improved Handling of Recycle Bin Files

4

I have a case with multiple files of interest in the Windows Recycle Bin that can be identified by their original name. To search for them, I had to manually...

clementepaixao

This was asked today in the IPED official training. When the application is restarted, the last graph state is lost.

lfcnassif

This can allow establish some correlations between locations using flexible criteria, like nearby locations visited by different users (putting each user locations in a different bookmark).

lfcnassif

Carve base64 encoded images and other formats

1

This is an old idea, documenting it here for a future implementation.

lfcnassif

Increased Volume Found after --continue

10

I'm processing a dd file with master branch (profile pedo, enableOCR and enableFaceRecognition). During the process, the process aborted, so I re-exectuted with --continue. Then I noticed that the `Volume...

aberenguel

Fix jump quoted edited messages on whatsapp, add new message types, fix quoted status, quoted private and quoted catalog messages

5

This PR fix Issue #2245 on Android New Databases. Fix quoted status, privaty quote, catalog quote messages on Android New and IPhone. Adds 2 new action types for Android: *63...

gfd2020

Minor #39 fixes splitted

1

Some bug fixes found during tests. This PR is part of old "Minor #39 fixes" #2163, which was splitted in this PR with only some bug fixes.

patrickdalla

ClassNotFoundException double[] using FaceRecognitionTask

39

Using Ubuntu 24.04 with latest IPED (master d436a740d), profile pedo. The error occurred in the end of processing. ``` 2024-06-28 03:26:28 [INFO] [engine.core.Manager] Changed to processing queue with priority 1...

aberenguel

Decrypt Whatsapp desktop client db files

3

Whatsapp Desktop Client on Windows saves the conversation databases locally in the folder below, mainly **message.db**. C:\Users\{user}\AppData\Local\Packages\5319275A.WhatsAppDesktop_cv1g1gvanyjgm\LocalState I took a look at the database and it is an encrypted sqlite...

gfd2020

Support decrypting WhatsApp databases if encryption key is available

1

Currently just decrypted databases are supported. It would be nice to decrypt DBs automatically if the key is available. There are different encryption schemes that may be found (crypt12, crypt14...)

lfcnassif