androidqf 1.8.3

This major release adds support for the new Intrusion Logging feature rolled-out as part of Android's Advanced Protection Mode.

It also includes a number of security fixes and hardening to prevent risks when processing malicious forensic artifacts.

What's Changed

• Migrate release workflow to GoReleaser by @besendorf in #76
• Disable UPX for Mac universal binaries by @DonnchaC in #78
• Remove runtime import and use UUID default path by @besendorf in #80
• Add Intrusion Logging acquisition module by @tesitura in #92

New Contributors

• @tesitura made their first contribution in #92

Full Changelog: v1.8.1...v1.8.3

androidqf 1.8.2

This release add support for the new Intrusion Logging feature roll-out as part of Android's Advanced Protection Mode.

Changelog

• 33453f1 Add AAPM compatibility + enabled checks to IL module
• 426e283 Add Intrusion Logging acquisition module
• 3e2a24d Also build collector module in goreleaser
• 6cd397e Disable UPX for Mac universal binaries
• efb313e Fix lowercase error strings for staticcheck
• d6e6cad Improve CLI logs in Intrusion Logging command
• 3ec3c62 Improve IL acquisition by waiting for intrusion logs from multiple devices until Ctrl+C or timeout
• 071fc18 Migrate release workflow to GoReleaser
• 506914b Remove runtime import and use UUID default path (#80)
• 32b5ca1 add placeholder adb files so staticcheck will not complain about them missing

v1.8.1

What's Changed

• Also add command.log in encrypted archives by @besendorf in #74
• implement adb over ip command line flag by @besendorf in #72
• Add -nocompress flag to ADB to avoid generating unparsable backups by @DonnchaC in #75

Full Changelog: v1.8.0...v1.8.1

v1.8.0

What's Changed

• Fix package name for the collector by @ping2A in #57
• Add link to SocialTIC output file dictionary by @roaree in #60
• Fix/ci go 1.22 support by @besendorf in #68
• add missing dev dependencies to README by @besendorf in #63
• Fix Windows zip backslash bug by @besendorf in #65
• Upgrade to Go 1.23.0 and update dependencies by @besendorf in #66
• Close log file before cleanup operations by @besendorf in #67
• Add Mounts module to collect /system mount information by @besendorf in #69
• Directly stream to encrypted zip archive by @besendorf in #70

New Contributors

• @ping2A made their first contribution in #57

Full Changelog: v1.7.1...v1.8.0

v1.7.1

What's Changed

• whitelist additional apk by @r-tx in #47
• Expand explanations of data collected by @roaree in #45
• WIP to improve retry logic by @DonnchaC in #55

Full Changelog: v1.7.0...v1.7.1

v1.7.0

v1.7.0

Fixes reliability issues when running AndroidQF

This release fixed #32 and #36 which were two major issues making it difficult to reliably use AndroidQF to check devices on Windows and Linux.

The releases binaries for Windows and Mac are now signed which should avoid various security warnings (fixing #7).

What's Changed

• Fix GitHub module path by @DonnchaC in #37
• Fix reliability issues when an existing ADB process is running by @DonnchaC in #36

Full Changelog: v1.6.1...v1.6.2

v1.6.1

Tag a new v1.6.1 release

v1.6.0-alpha-2

AndroidQF bundles native collector binaries to run on the target Android device. The collector binaries much be built for each architecture which can bloat the binary size. This release includes UPX compression for the collector binaries which reduces overall file size by 50%

We have also removed a specific ARMv7 binary as the ARMv6 collector should run on v7 systems.

Beta build with collector functionality

A beta release to test if new builds with the collector binaries are working well