Skip to content

starshield-forensics v0.3.6 — Multi-Schema LevelDB Carver, Zero-PII Precheck Gate & Single-File Zipapp

Choose a tag to compare

View all tags
@Ziqi Ziqi released this 12 Nov 03:11
· 11 commits to main since this release
v0.3.6
27d7a51

Highlights in v0.3.6

  • Multi-Schema Chromium LevelDB .log Carving (--schema auto|chatsvc|generic-json): Expands deterministic JSONDecoder.raw_decode WAL extraction beyond chatsvc (Teams/Skype) to cover Slack Web, WhatsApp / Web Messengers, and B2B Supplier/Invoice Portals, with per-record ISO-13616 IBAN Mod-97, Luhn, BIC, and intra-message UK Sort Code extraction.
  • Zero-PII Local Feasibility Gate (starshield precheck <path>): Offline pre-screening of Chromium IndexedDB/LevelDB directories and .log/.ldb files (verifying 8-byte SSTable footer magic 0xdb4775248b80fb57, .blob directories, and Blink 0xFF headers) emitting GO / PARTIAL / NO_GO_COMPACTED_OR_UNSUPPORTED with zero plaintext or path leakage.
  • Zero-Install Single-File Zipapp (starshield.pyz): Run python3 starshield.pyz demo or python3 starshield.pyz precheck <dir> on air-gapped forensic VMs and law-firm workstations with zero package installation.
  • Official PyPI OIDC Trusted Publisher Workflow (.github/workflows/publish-pypi.yml) & aligned requires-python >= 3.10.
  • Verification: 24/24 adversarial & privacy canary unit tests passing + 24/24 (1.0000) on StarShield-Bench-24.
Assets 10
Loading