• New “Content Viewer” detects and displays embedded data in a more human-friendly manner than the analysis GUI (a/k/a data browser) and supports:

  • Images (BMP. JPG, PNG, TIFF, ICO)

  • JSON (with structured view, coloring, search, etc.)

  • XML (with structured view, coloring, search, etc.)

  • YAML (with structured view, coloring, search, etc.)

  • ZIP metadata

  • Plain text (with original formatting)

  • UTF-16 plain text (with original formatting)

  • PDF

  • GPS coordinates (with mapping if Internet access is available)

  • MsgPack and CBOR

  • ProtoBuf

  • Base64 (with additional auto detection and decoded data handling, e.g. compound base64 tokens)

  • Hex dump of binary

  • JSON Web Token (JWT) including embedded tokens

  • JSON Web Encryption (JWE) including embedded tokens

  • LevelDB V8 serialization

  • Snappy decompression when used with V8 serialization and IndexedDB

  • IndexedDB metadata

• Improved handling of large blobs (>1mb)

• Two new options for exporting a record’s value bytes to a file

• New option for exporting all records per path from initial summary/statistics view

• New ability to select multiple records for export from the records table view

• Improved searching for all text-related data types

• New extended copy menu from the records table view via right-click

• New checkbox selection ability in the records table view

• Updated readme

LevelDB-Recon-v1.0.0.62.zip MD5 Hash = 305975fcba8693b2bb5a84a603d40383

• Loosened key/value pair validation particularly in regard to keys without values

LevelDB-Recon-v1.0.0.54.zip MD5 Hash = 3110d09fc9e386a206cd894f244645da

• New “Parsed view” option which automatically determines value data format & displays it accordingly (support for JSON currently)

LevelDB-Recon-v1.0.0.53.zip MD5 Hash = 84a8913af5229f00c4ff1944f2059fe2

• Improved record validation

LevelDB-Recon-v1.0.0.52.zip MD5 Hash = a41ea525ca4e3a0d6aa3dd733a6be674

• Several improvements to slow scanning (triggered when corrupt input is detected) resulting in a 2x increase in speed

• Golang library updated and now signed

LevelDB-Recon-v1.0.0.51.zip MD5 Hash = 49ae3fd9d3354472bae5a51a05453b5b

• New pre-scan functionality for corrupt input

• Improved index handling

• Improved record metadata validation

• Configurable max compressed chunk size to give users more control over corrupt input processing

• Fixed crashes related to corrupt input

• Increased speed of corrupt input processing of Skype LevelDB/IndexedDB data (messages, calls, files, user details, user activity, user preferences)

LevelDB-Recon-v1.0.0.50.zip MD5 Hash = e8e3fb03575b22b45ebad1b3193fe64e

• Application-layer parsing of Skype LevelDB/IndexedDB data (messages, calls, files, user details, user activity, user preferences)

• Additional (or, bonus) application-layer parsing of Skype data (non-LevelDB/IndexedDB) from Android/iOS sources

• New and extremely powerful method of recovering LevelDB data from corrupt input (e.g. corrupt input might result from copying “live” LevelDB files)

• Moved Recurse checkbox to the right of the “Select Folder” Browse button to make GUI more intuitive

• Updated SQLite to v3.45.3

• Updated readme

LevelDB-Recon-v1.0.0.47.zip MD5 Hash = 06446c68ac3844ad50a8de927c9127ef

• Improved handling of corrupt input

• More robust handling of LevelDB indices

• Minor adjustment to logging to improve readability

• Fixed broken database export

LevelDB-Recon-v1.0.0.33.zip MD5 Hash = b54f79230facbe2473edcfa1d3da7159

• Fixed bug in DataBrowser which could result in a crash

• Fixed bug which impacted ability to open DataBrowser from main GUI

• Multiple adjustments to DataBrowser Find function

• New DataBrowser feature that filters list view based on strings in a file

• Source file and sequence information now added to output files

• Minor performance improvement

• Updated readme

LevelDB-Recon-v1.0.0.31.zip MD5 Hash = 0474a18d74d300f1e908c5cca24527a7

• Initial public release

LevelDB-Recon-v1.0.0.28.zip MD5 Hash = 6a72c8ba921dc5dc9a3d459b943aa874