iLEAPP v2026.3.0
- New Apple Unified Logs support: parser bundled into all builds, 16+ artifacts added from a predicate survey, plus rotated/sysdiagnose PowerLog support with time-offset correction and over a dozen new Power Telemetry/PowerLog artifacts (EPSQL, BGSQL).
- Major messaging expansion: Telegram (accounts, contacts/peers, chats, cached peer details, device contacts, presence, message tags), Wickr (messages, account identity via keychain), Session/Oxen (decrypted messages, contacts, attachments), plus new app parsers for DuckDuckGo, MEGA, Onion Browser, what3words, Dubox/Terabox, Claude, Apple Intelligence Report, and Lidl Plus (SQLCipher + Keychain).
- Continued Biome/SEGB coverage: Networking Edge Selection, DuetExpertCenter notifications, Privacy Accounting streams, Contact Autocomplete Feedback, and multiple case-sensitivity/path-glob fixes preventing duplicated or dropped rows across sibling artifacts.
- Documentation integrity push: unsourced claims removed across dozens of artifacts, sample_data re-recorded from a full corpus run, corpus keys mapped to public test images, and a new CI tripwire guarding against unsupported claim language.
- Security and stability hardening: HTML report injection fixes (escaped evidence names, removed remote destinations, new CI guard), WAL visibility restored for SQLite artifacts, fixes for concurrent-run history.json corruption, FSEvents/PowerLog temp-file leaks cleaned up, and expanded CI (Python 3.13/3.14 runtime contract, Windows/Linux/ARM64 test builds, import smoke tests).
New Contributors
Full Changelog: v2026.2.1...v2026.3.0
Contributors
malwr4n6 and bcbtree