Roadmap

Roadmap for the v0.1 Release

• Jun 2019: Finish removing the last issues for the "Initial Release" milestone.
• Jul 2019: Figure out how to branch/release in github and work on setting up an arch package
• Jul 2019: Finish up and release v0.1.

Roadmap for the v0.2 Release

• Add Tagging capability (Bookmarking) - Done
• Add Preview Reporting capability - Done
• Add Tag Manually Carved Section - Done
• Add Simple Search to Hex Editor - Done
• Add Settings for Default Case Path, Default Report Path, TimeZone selection, and AutoSave Interval - Done
• Add Video Thumbnailing - Done
• Overhaul/Improve Category/Signature values - Done
• Add Game for Time Intensive Processing Jobs - Done (xchomp - pacman clone)
• Add Publish Reporting - Done
• Add Install Script to simplify compile/install tasks - Done
• Update About Page with Attribution where needed - Done

Roadmap for the v0.3 Release

• Dig Deeper Carving (Semi-Smart carving implemented for jpg, gif, png, pdf, and mpg) - Done
• Artifact Viewers (PDF Viewer Added) - Done
• Implement lnk file parser/viewer - Done
• Implement recycle bin INFO2/$I file parser/viewer - Done
• Implement apfs support from sleuthkit - Done (Support was removed during v0.4 development with removal of sleuthkit)
• Ensure reading all artifacts from HFS+ - Done (Support was removed during v0.4 development with removal of sleuthkit)

Roadmap for the v0.4 Release

• Registry Viewer and subsequent reporting - Done
• Creating a Forensic Image in RAW or ZMG'd RAW format with MD5 and log file - Done
• Store Filter Setting so it gets applied when re-opened. - Not Started
• Switching from TSK filesystem parsing to manually parsing file systems on my own. - Done
• Maybe Switch from dynamic libraries to static libraries for a lot of forensic/parsing libraries so if an arch package gets updated, it won't break my code - Not implemented, will revisit later and decide if I want to do static libraries.
• File system identification: FAT12/16/32, EXFAT, NTFS, EXT2/3/4, NTFS, HFS, HFS+/X, APFS, BTRFS, XFS, BeFS, Bitlocker, F2FS, ISO, UDF, ReFS - Done
• Parsing FAT12/16/32, EXFAT, NTFS, and EXT2/3/4 - Done

Roadmap for the v0.5 Release

• Known Hash Matching - Done
• Parse HFS+ - Done
• Implement nested zips - Not Started
• Jump List Parser/Viewer - Not Started
• Mbox Parser/Viewer - Done
• Parse HFS - Not Started
• Parse APFS - In Progress
• Parse ISO9660 - Done
• Parse XFS - In Progress

Future Releases

• Export Files to a Logical Forensic Image (Custom Logical Image format)
• Add Apple File System parsing: HFS, HFS+, and APFS
• Add other Linux File System parsing: BTRFS, XFS, ZFS
• Add luks, ecryptfs identification/parsing
• Add Bitlocker parsing
• Add ISO and UDF parsing
• Other semi-smart carvers such as docx, xlsx, pptx, mp4, mbox, eml, msg, zip, doc, xls, ppt
• Artifact Viewers (mbox, pst/ost, eml, office, old office, volume shadow copy)
• SQLite Viewer and subsequent reporting
• Jump List Parser/Viewer
• Archive Extraction (tar, gzip, bzip2, xz, lz4, zstd, etc)