2.2.1

Fixes for TrueTree on Sonoma 14.4
Support for Brave Browser
Disable flag added for skipping collection of some sensitive data such as browser history
collection of btm persistence
fish shell support
various other commenting, stability, and bug fixes

2.0.0

What's Changed

• Changes from v1.2.0 include:
• support for Arc & Edge browsers
• eslogger
• collection of extended attributes
• pcap file from tcpdump
• collection and parsing of XPdb from XProtectBehavioralServices on macOS 13+
• bug fixes
• other minor changes

Version 1.2.0

What's Changed

• Edge and CSV parser by @stuartjash in #42
• Specify output filename by @c7bercat in #44
• external UL file, xattr, config profiles, hash info @stuartjash #45

Full Changelog: v1.1.0...v1.2.0

Version 1.1.0

What's Changed

• Logo by @stuartjash in #33
• Support Chrome Profiles by @kpolley in #39
• added version flag to arg manager and print version in aftermath log by @stuartjash in #40
• standalone binary added to release

New Contributors

• @kpolley made their first contribution in #39

Full Changelog: v1.0.0...v1.1.0

Version 1.0.0

What's Changed

• Create README.md by @mattbenyo in #32
• fixed timestamps to conform to iso format by @stuartjash in #31

Full Changelog: v0.0.5...v1.0.0

Version 0.0.5

• Hot fix for analysis bug

Version 0.0.4

What's Changed

• v004 - process parser by @stuartjash in #30

Full Changelog: v0.0.3...v0.0.4

Version 0.0.3

What's Changed

• Tests by @c7bercat in #28
• v003 update by @stuartjash in #29

New Contributors

• @c7bercat made their first contribution in #28

Full Changelog: v0.0.2...v0.0.3

Version 0.0.2

• Added --pretty option so colorized output is not default
• New --collect-dirs option. User can specify any directories they want to collect the raw contents of
• Included chrome extensions
• Updated timestamp collection to unix timestamps (more reliable and performant)
• XProtect Remediate unified log now included

What's Changed

• analysis and storyline by @stuartjash in #26
• v002 - updates and cleanup by @stuartjash in #27

Full Changelog: v0.0.1...v0.0.2

Version 0.0.1

v0.0.1

• Initial internal release. Available for testing by following the steps in the README. Signed and notarized. Installs to /usr/local/bin.