v0.2.0 - 2023-07-13

v0.2.0 - Released!

Darwin aarch64 (ARM) release is from a local mac Studio system due to issues with GitHub Actions and cross compiling. See #21
Other binaries are produced from GitHub Actions

Added

• Initial Linux support. Supports filelisting, processes, systeminfo, cron, shellhistory, chromium, firefox, and ELF binary artifacts
• Initial remote upload support for: GCP, Azure, and AWS
• Support for setting logging level from TOML input. error, warn, info, debug are supported
• Support for parsing ExecPolicy db on macOS
• Support for programatically outputting data through artemis via Deno runtime
• Journal parsing support on Linux
• Sudo log parser support for macOS and Linux

Changed

• Minor improvements to filelisting when PE or MACHO parsing is enabled
• Release binaries are now stripped
• Faster ESE parsing

Fixed

• Possible array out bounds error when trying to get browser user info
• Dont throw error if artemis cannot carve out BITS Job info
• Additional fixes and enhancements
• Duplicated ESE values when parsing branched data

Dependencies

• Updated all dependencies
• Added rusty-s3, jsonwebtoken, reqwest for remote upload support. elf for ELF parsing
• Added ruzstd to decompress Journal data
• Added lz4_flex for decompressing older Journal files
• Added xz2 for decompressing older Journal files

Tests

• Enabled additional tests

v0.1.0 - 2023-05-19

Initial release of artemis!

Darwin aarch64 (ARM) release is from a local mac Studio system due to issues with GitHub Actions and cross compiling. See #21
Other binaries are produced from GitHub Actions