Skip to content

Batch LEAPP v1.1.0: App Coverage Analysis

Latest

Choose a tag to compare

@abrignoni abrignoni released this 09 Jul 03:45
7163c6e

The big new thing in this release is coverage analysis. Point Batch LEAPP at your test images with the new --coverage flag and it tells you which installed apps the LEAPPs are NOT parsing yet. That list is a data-driven module-writing roadmap, ranked by how much evidence is sitting on disk unread.

What's new

  • --coverage mode. Runs a set of App Inventory artifacts on every extraction and aggregates the results into a single batch_apps.sqlite at the output root, next to a batch_apps.lava project so the whole analysis opens in LAVA like any other case.
  • App Coverage Analysis button on the master report index. One click to the analysis in LAVA.
  • Coverage reports: Coverage Summary (a per-image scoreboard), Apps Not Parsed rollup (your target list), App Coverage, Module App Spread, and Unknown Containers.
  • batch_coverage.py re-aggregates an existing batch output without reparsing anything.
  • GUI: the Type field is now a dropdown, and it says "extractions" instead of "zips" since the tool also handles tar and gz.

Coverage mode needs source checkouts

Coverage runs against source checkouts of iLEAPP or ALEAPP, because the App Inventory artifacts ship in those repos and the compiled LEAPP binaries do not bundle them. Regular batch runs are unchanged and work fine with binaries or source.

Docs

Downloads for macOS (Apple Silicon) and Windows are attached below. Free and open source, as always. Feedback and pull requests welcome.