Skip to content

IRFlow Timeline 1.0.8

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Jul 07:24
· 22 commits to main since this release
v1.0.8
709e32f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

IRFlow Timeline 1.0.8 significantly expands AI application forensics, adding deeper artifact collection and parsing across popular AI assistants.

AI Application Forensics

  • Grok AI support (new) — collect and analyze Grok Build conversations, sessions, and associated metadata.
  • Claude expanded — recursively parse Claude Code and Claude Desktop/Cowork sessions, transcripts, audit records, tool activity, and actual shell commands.
  • Codex expanded — recover SQLite data with WAL/SHM support, rollout sessions, commands, tool calls, and bounded outputs.
  • Improved parsing for ChatGPT Desktop, GitHub Copilot CLI, Gemini CLI, Cursor, and other supported assistants.
  • Better provenance, session relationships, and AI Secret Hunt safeguards.

Additional Improvements

  • New guided workflow for importing KAPE and triage collections.
  • Enhanced Process Inspector, Persistence Analyzer, and Lateral Movement Tracker.
  • Improved timeline navigation, bulk actions, and evidence review.
  • Memory-safe queries and bounded workers for greater stability with large datasets.
  • Signed and notarized universal macOS release for Apple Silicon and Intel.
Assets 6
Loading