Merge pull request #142 from obsidianforensics/remove-unfurl

Update Hindsight version prior to release and remove Unfurl plugin (u…
obsidianforensics · Mar 29, 2023 · eee2db4 · eee2db4
2 parents de2e847 + 9263111
commit eee2db4
Show file tree

Hide file tree

Showing 7 changed files with 15 additions and 109 deletions.
diff --git a/pyhindsight/__init__.py b/pyhindsight/__init__.py
@@ -1,3 +1,3 @@
 __author__ = "Ryan Benson"
-__version__ = "2021.12"
+__version__ = "2023.03"
 __email__ = "ryan@dfir.blog"
diff --git a/pyhindsight/plugins/__init__.py b/pyhindsight/plugins/__init__.py
@@ -1,3 +1,3 @@
 __all__ = ['chrome_extensions', 'generic_timestamps', 'google_analytics',
            'google_searches', 'load_balancer_cookies', 'quantcast_cookies',
-           'query_string_parser', 'time_discrepancy_finder', 'unfurl_interpretation']
+           'query_string_parser', 'time_discrepancy_finder']
diff --git a/pyhindsight/plugins/unfurl_interpretation.py b/pyhindsight/plugins/unfurl_interpretation.py
diff --git a/pyhindsight/templates/inputs_selector.tpl b/pyhindsight/templates/inputs_selector.tpl
@@ -106,7 +106,7 @@
                                     <b>Default Locations:</b>
                                     <table>
                                         <tr><td class="input-option">Windows XP:</td><td> \[userdir]\Local Settings\Application Data\Google\Chrome\User Data</td></tr>
-                                        <tr><td class="input-option">Vista/7/8/10:</td><td> \[userdir]\AppData\Local\Google\Chrome\User Data</td></tr>
+                                        <tr><td class="input-option">Vista/7/8/10/11:</td><td> \[userdir]\AppData\Local\Google\Chrome\User Data</td></tr>
                                         <tr><td class="input-option">Linux:</td><td> \[userdir]/.config/google-chrome</td></tr>
                                         <tr><td class="input-option">OSX/macOS:</td><td> \[userdir]/Library/Application Support/Google/Chrome/Default</td></tr>
                                         <tr><td class="input-option">iOS:</td><td> \Applications\com.google.chrome.ios\Library\Application Support\Google\Chrome</td></tr>

diff --git a/requirements.txt b/requirements.txt
@@ -4,7 +4,6 @@ pycryptodome>=3.9.7
 pycryptodomex>=3.9.7
 xlsxwriter>=3.0.1
 bottle>=0.12.18
-setuptools==65.5.1
+setuptools>=65.5.1
 puremagic~=1.11
-argparse~=1.4.0
-dfir-unfurl
+argparse~=1.4.0
diff --git a/spec/file_version_info_cmd.txt b/spec/file_version_info_cmd.txt
@@ -6,8 +6,8 @@ VSVersionInfo(
   ffi=FixedFileInfo(
     # filevers and prodvers should be always a tuple with four items: (1, 2, 3, 4)
     # Set not needed items to zero 0.
-    filevers=(2021, 12, 0, 0),
-    prodvers=(2021, 12, 0, 0),
+    filevers=(2023, 3, 0, 0),
+    prodvers=(2023, 3, 0, 0),
     # Contains a bitmask that specifies the valid bits 'flags'r
     mask=0x0,
     # Contains a bitmask that specifies the Boolean attributes of the file.
@@ -33,10 +33,10 @@ VSVersionInfo(
         [StringStruct(u'Comments', u'Internet history forensics for Google Chrome/Chromium'),
         StringStruct(u'CompanyName', u'dfir.blog'),
         StringStruct(u'FileDescription', u'Hindsight'),
-        StringStruct(u'LegalCopyright', u'Copyright© 2012 - 2021  Ryan Benson'),
+        StringStruct(u'LegalCopyright', u'Copyright© 2012 - 2023  Ryan Benson'),
         StringStruct(u'ProductName', u'Hindsight'),
-        StringStruct(u'FileVersion', u'2021.12'),
-        StringStruct(u'ProductVersion', u'2021.12'),
+        StringStruct(u'FileVersion', u'2023.03'),
+        StringStruct(u'ProductVersion', u'2023.03'),
         StringStruct(u'InternalName', u'Hindsight'),
         StringStruct(u'OriginalFilename', u'hindsight.exe')])
       ])

diff --git a/spec/file_version_info_gui.txt b/spec/file_version_info_gui.txt
@@ -6,8 +6,8 @@ VSVersionInfo(
   ffi=FixedFileInfo(
     # filevers and prodvers should be always a tuple with four items: (1, 2, 3, 4)
     # Set not needed items to zero 0.
-    filevers=(2021, 12, 0, 0),
-    prodvers=(2021, 12, 0, 0),
+    filevers=(2023, 3, 0, 0),
+    prodvers=(2023, 3, 0, 0),
     # Contains a bitmask that specifies the valid bits 'flags'r
     mask=0x0,
     # Contains a bitmask that specifies the Boolean attributes of the file.
@@ -33,10 +33,10 @@ VSVersionInfo(
         [StringStruct(u'Comments', u'Internet history forensics for Google Chrome/Chromium'),
         StringStruct(u'CompanyName', u'dfir.blog'),
         StringStruct(u'FileDescription', u'Hindsight'),
-        StringStruct(u'LegalCopyright', u'Copyright© 2012 - 2021  Ryan Benson'),
+        StringStruct(u'LegalCopyright', u'Copyright© 2012 - 2023  Ryan Benson'),
         StringStruct(u'ProductName', u'Hindsight'),
-        StringStruct(u'FileVersion', u'2021.12'),
-        StringStruct(u'ProductVersion', u'2021.12'),
+        StringStruct(u'FileVersion', u'2023.03'),
+        StringStruct(u'ProductVersion', u'2023.03'),
         StringStruct(u'InternalName', u'Hindsight'),
         StringStruct(u'OriginalFilename', u'hindsight_gui.exe')])
       ])