ALEAPP v2026.3.0
- New encrypted messenger support: Signal for Android with full SQLCipher decryption, attachment/thumbnail decryption and message-linking, plus Telegram for Android (accounts, chats, peers, group/channel members, VoIP call logs, service message actions) and Session messenger account parsing.
- Broad new app coverage: MeWe (posts, comments, media, polls, reactions, groups), Kik, BeReal, GalleryVault (hidden-file recovery), JusTalk and JusTalk Kids, Weibo, Xiaohongshu (RED), Slack, AllTrails, BRD (BreadWallet), Dropbox, what3words, DJI drone flight tracks, Claude, and Smart Sidebar File Dock (OxygenOS/ColorOS).
- Deep system artifact expansion: Google Play services databases (constellation, account history, icing, ODLH), Samsung system databases (Privacy Dashboard, WiFi, Sleep Detection, CMH tagging, media provider), modernized UsageStats/Recent Tasks, and Google Dialer/Calendar artifacts.
- Forensic integrity fixes: databases now opened read-only to stop artifacts writing to evidence files, ProtonVPN hostname resolution no longer touches the network at parse time, and Snapchat's arroyo.db parsing recovers WAL-only rows with row-provenance columns.
- Security and stability hardening: HTML report injection fixes (escaped evidence names, removed remote destinations, CDN locale fetch removed, new CI guard), WAL visibility restored for SQLite artifacts, concurrent-run history.json corruption fixed, and expanded CI (full Python version matrix, sample_data validation, manual PyInstaller test builds).
New Contributors
- @Rugikex made their first contribution in #720
- @bcbtree made their first contribution in #1038
- @AlexC-DF made their first contribution in #1052
- @Gear-I made their first contribution in #962
- @Newhope81 made their first contribution in #1078
- @mpolastro made their first contribution in #656
- @akhil-dara made their first contribution in #958
Full Changelog: v2026.2.0...v2026.3.0
Contributors
mpolastro, akhil-dara, and 5 other contributors