Skip to content

Releases

RepertIA 3.0.2

Choose a tag to compare

@silvexe silvexe released this 09 Nov 22:08

🇮🇹 Testo italiano più sotto.

RepertIA works completely WITHOUT artificial intelligence. The local AI model is not included in the packages: it is an optional choice of the user (LM Studio, llama-server or Ollama). Without a model all analyses, searches and reports work.

Download

System File
Windows (installer) RepertIA-3.0.2-Setup.exe
Windows (portable) RepertIA-3.0.2-Windows.zip
Mac (Apple Silicon) RepertIA-3.0.2-Mac.zip
Linux x86_64 (experimental) RepertIA-3.0.2-Linux.tar.gz
Acceptance test (collaudo) RepertIA-collaudo.zip
SHA-256 checksums SHA256SUMS.txt
Checksum signature (minisign) SHA256SUMS.txt.minisig
Illustrated guide (HTML, Italian and English) RepertIA-guida-3.0.2.html
Demo video English · Italian

Checking the download: minisign -Vm SHA256SUMS.txt -P RWRcYbYmv6AKnsFJMmI0szUorQooceqz0AZ3/9nGrdigNZ4hC6F9KJia must say Signature and comment signature verified; then shasum -a 256 -c SHA256SUMS.txt --ignore-missing (on Windows: certutil -hashfile <file> SHA256). The key is also in SECURITY.md.

Sources of the third-party components (GPL/LGPL), unchanged from 3.0.1: RepertIA-2.19.0-sorgenti-terze-parti.tar, poppler-26.09.0.tar.xz, ffmpeg-n9.0.2-36-g6882969ce9-sorgenti.tar.gz, 7z2605-src.tar.xz, Image-ExifTool-13.61.tar.gz. New in the Mac and Windows packages: dissect.evidence 3.13 (Fox-IT, AGPL-3.0-or-later) for AD1 images; on Linux it is installed by installa.sh.

Tested against public reference data

We compared RepertIA with results published by others, on public data with known answers. Results, method, limits and scripts are in the repository (docs/prove):

  • Deleted file recovery (90 NIST CFTT images): complete and correct files first or tied for first against the published reports, on FAT, exFAT, NTFS and ext; on exFAT all of them.
  • Image carving (26 NIST CFTT images): whole files, also not aligned to sectors, equal to the best published result, zero false positives; fragmented files of the 2014 set still below the best.
  • NIST «Data Leakage» case: of 60 questions, 53 can be checked on the images and RepertIA's answers are NIST's (except one e-mail in the unused space of the OST); the other 7 are analyst reasoning.
  • Joshua Hickman's Android 14 and iOS 17: all 262 actions present in the phones' data found, with the right details even where the diary is wrong.

This is not a certification: NIST and Joshua Hickman did not test RepertIA.

What's new in 3.0.2

  • Logical source: open a case from files already collected: zip, tar, tar.gz, 7z, rar, FTK Imager AD1 images (also multi-segment, with FTK's hashes checked file by file; files that FTK listed without copying their content are reported as "without data"), CD/DVD images ISO 9660 and UDF (also BIN/CUE) or a folder.
  • UDF with VAT: multisession CD-Rs are read by RepertIA, including the files that exist only in the previous VATs.
  • Windows: Windows Search index (Windows.edb), Internet Explorer history, Sticky Notes, Google Drive and more events.
  • Deleted file recovery: fragmented deleted files on exFAT rebuilt by following the FAT chain; exFAT dates with the UTC offset of the entry; on ext3/ext4 the files of deleted folders get back their name and path; deleted names left without metadata are listed; a deleted file whose inode was reassigned, or whose blocks now belong to another file, is marked as such.
  • Carving: PhotoRec default file types (the noisy signatures split BMP and TIFF files) and, after PhotoRec, a byte-level search for JPEG, PNG, GIF, BMP, TIFF and HEIC files not aligned to sectors.
  • iMessages in "Recently Deleted" (iOS keeps them for about 30 days) are marked "deleted by the user" with the date of deletion, in chats, in the deleted filter, in the report and for the AI agent.
  • HTML report: navigation bar always visible with previous and next section, button to go back to the top, table headers aligned with the columns.
  • Illustrated guide and demo videos redone from scratch, in Italian and English.
  • Fixes: iLEAPP/ALEAPP titles cut without any sign (now "…"), report window on disk cases ("no such column: grp"), PhotoRec on Windows with the case on a different drive (it recovered nothing), fixes found with the NIST «Data Leakage» case, non-ASCII file names on Windows, archive dates on Windows, Linux installation (ewf-tools, bulk_extractor explained), three hardenings from CodeQL alerts.

Tested: acceptance test 754/754 in Italian and English (128/128 on public images) from the Windows package and from the Setup installation, 754/754 from the Mac package; navigation 525/525 in Italian and English (Chromium).

Not tested: Linux with this version on a real Linux computer.

Details in CHANGELOG.en.md.


RepertIA funziona completamente SENZA intelligenza artificiale. Il modello IA locale non è incluso nei pacchetti: è una scelta facoltativa dell'utente (LM Studio, llama-server o Ollama). Senza modello funzionano tutte le analisi, le ricerche e i report.

Scarica

Sistema File
Windows (installazione) RepertIA-3.0.2-Setup.exe
Windows (portatile) RepertIA-3.0.2-Windows.zip
Mac (Apple Silicon) RepertIA-3.0.2-Mac.zip
Linux x86_64 (sperimentale) RepertIA-3.0.2-Linux.tar.gz
Collaudo RepertIA-collaudo.zip
Impronte SHA-256 SHA256SUMS.txt
Firma delle impronte (minisign) SHA256SUMS.txt.minisig
Guida illustrata (HTML, italiano e inglese) RepertIA-guida-3.0.2.html
Video dimostrativo italiano · inglese

Per controllare lo scaricamento: minisign -Vm SHA256SUMS.txt -P RWRcYbYmv6AKnsFJMmI0szUorQooceqz0AZ3/9nGrdigNZ4hC6F9KJia deve rispondere Signature and comment signature verified; poi shasum -a 256 -c SHA256SUMS.txt --ignore-missing (su Windows: certutil -hashfile <file> SHA256). La chiave è anche in SECURITY.md.

Sorgenti dei componenti di terze parti (GPL/LGPL), invariati dalla 3.0.1: RepertIA-2.19.0-sorgenti-terze-parti.tar, poppler-26.09.0.tar.xz, ffmpeg-n9.0.2-36-g6882969ce9-sorgenti.tar.gz, 7z2605-src.tar.xz, Image-ExifTool-13.61.tar.gz. Nuovo nei pacchetti Mac e Windows: dissect.evidence 3.13 (Fox-IT, AGPL-3.0-or-later) per le immagini AD1; su Linux lo installa installa.sh.

Provato su dati di riferimento pubblici

Abbiamo confrontato RepertIA con risultati pubblicati da altri, su dati pubblici con le risposte note. Risultati, metodo, limiti e script sono nel repository (docs/prove):

  • Recupero dei file cancellati (90 immagini NIST CFTT): file completi e giusti primo o pari al primo rispetto ai rapporti pubblicati, su FAT, exFAT, NTFS ed ext; su exFAT tutti.
  • Carving di immagini (26 immagini NIST CFTT): file interi, anche non allineati ai settori, pari al miglior risultato pubblicato, zero falsi positivi; sui file frammentati della serie 2014 ancora sotto il migliore.
  • Caso NIST «Data Leakage»: delle 60 domande, 53 si verificano sulle immagini e le risposte di RepertIA sono quelle NIST (salvo un messaggio nello spazio non usato dell'OST); le altre 7 sono di ragionamento dell'analista.
  • Android 14 e iOS 17 di Joshua Hickman: ritrovate tutte le 262 azioni presenti nei dati dei telefoni, con il dato giusto anche dove il diario sbaglia.

Non è una certificazione: NIST e Joshua Hickman non hanno provato RepertIA.

Novità della 3.0.2

  • Sorgente logica: si apre un caso da file già raccolti: zip, tar, tar.gz, 7z, rar, immagini AD1 di FTK Imager (anche in più segmenti, con gli hash di FTK ricontrollati file per file; i file che FTK ha elencato senza copiarne il contenuto sono segnalati «senza dati»), immagini di CD/DVD ISO 9660 e UDF (anche BIN/CUE) o una cartella.
  • UDF con VAT: i CD-R scritti in più volte si leggono con RepertIA, compresi i file che esistono solo nelle VAT precedenti.
  • *...
Read more

RepertIA 3.0.1

Choose a tag to compare

@silvexe silvexe released this 07 Nov 09:05

🇮🇹 Testo italiano più sotto.

[security] This version fixes a serious vulnerability: update from 3.0.0 and earlier versions. See Security below.

RepertIA works completely WITHOUT artificial intelligence. The local AI model is not included in the packages: it is an optional choice of the user (LM Studio, llama-server or Ollama). Without a model all analyses, searches and reports work.

Download

System File
Windows (installer) RepertIA-3.0.1-Setup.exe
Windows (portable) RepertIA-3.0.1-Windows.zip
Mac (Apple Silicon) RepertIA-3.0.1-Mac.zip
Linux x86_64 (experimental) RepertIA-3.0.1-Linux.tar.gz
Acceptance test (collaudo) RepertIA-collaudo.zip
SHA-256 checksums SHA256SUMS.txt
Checksum signature (minisign) SHA256SUMS.txt.minisig
Illustrated guide (HTML, Italian and English) RepertIA-guida-3.0.1.html

Sources of the third-party components (GPL/LGPL): RepertIA-2.19.0-sorgenti-terze-parti.tar, poppler-26.09.0.tar.xz, ffmpeg-n9.0.2-36-g6882969ce9-sorgenti.tar.gz, 7z2605-src.tar.xz (unchanged from 3.0.0) and Image-ExifTool-13.61.tar.gz (new).

Security

  • Archives with paths that leave the folder (serious, up to 3.0.0). In Additional analyses, an archive entry inside the forensic copy with ../ or a link pointing outside made RepertIA read a file of the analyst's computer and move it into the case (and into the portable report). Now those entries are not extracted and stay in the list with the note "not extracted (path that leaves the archive or link)". Tested with a built image (tar and zip with ../, absolute paths and links), with and without 7-Zip.
  • The program's pages can no longer be framed by external sites; the access code is compared in constant time.
  • Signed checksums (new). SHA256SUMS.txt is signed with minisign: minisign -Vm SHA256SUMS.txt -P RWRcYbYmv6AKnsFJMmI0szUorQooceqz0AZ3/9nGrdigNZ4hC6F9KJia must say Signature and comment signature verified; then shasum -a 256 -c SHA256SUMS.txt --ignore-missing. The key is also in SECURITY.md.
  • iLEAPP and ALEAPP with Brotli 1.2.1 (1.2.0 has a critical CVE) and pyasn1 0.6.5 (0.6.4 has four denial-of-service CVEs).
  • ExifTool 13.61 in the Windows packages (13.60 before): it fixes a hang on a corrupted FLIF file and excessive memory use with corrupted metadata. On Mac and Linux ExifTool comes from Homebrew and apt.

What's new in 3.0.1

  • Illustrated report: whoever receives it relives the case. Report lets you choose what goes in: sections, Bookmarks categories item by item, whole types (all chats, photos, videos, audio, email, artifacts of a category, map locations). Photos as thumbnails (a click opens the original, copied with its SHA-256), videos with a frame, documents with their first page, chats with bubbles and attachments, artifacts and email with all their fields; one row per item numbered “1 of N”, with the total next to the section. HTML (split into pages), PDF with an embedded Unicode font and Word with the same content, impronte.csv and an entry in the case log.
  • Portable report: the New report shows bookmarked chats with their attachments and follows the same layout; artifacts open in the side panel, which closes when you move elsewhere; ↑ ↓ arrow keys in the lists; a frame for every video.
  • Photos, videos and audio: all of them, by app. On phones they are recognised from the content of the file, not only from the extension, so app caches are included; each file is assigned to its app or folder, with "of which in caches". Hickman's Android 14: 21,295 photos, 344 videos, 223 audio files in 81 apps.
  • Photos, videos and audio by content on storage media too: on disks, pen drives and forensic images a JPEG without an extension or with a wrong one (browser caches, renamed files) goes into Photos, grouped by program or folder (Chrome, Edge, Firefox, Safari, Telegram…, Pictures, Desktop, Downloads, Temp, Recycle Bin, Recovered by carving); a deleted file goes in by content only if the content is still its own. DFTT 8: file2.dat and the deleted file7.hmm are now among the photos.
  • Photos and videos inside browser caches. Chrome, Chromium, Samsung Internet, Edge, Opera, Brave, DuckDuckGo and apps that show web pages keep downloaded images in Chromium's cache, where the photo comes after a header and the web address. “Text and media” now extracts them (only those bytes, read-only, with hashes), on phones and disks, under the browser or app, with the web address and the offset in the source file; on Hickman's public Android 14: 4,219 photos and 7 videos, none before.
  • “Text and metadata” is now “Text and media”, because it also recognises photos, videos and audio by content.
  • The AI agent sees the same data as the interface: photos and videos from browser caches, other extracted files and anomalies whenever the case has them; photos, videos and audio by app (count_media, list_media); under the messages the time read on this phone and the delivery and read receipts, with their source.
  • WhatsApp calls: number and address-book name instead of the LID alone, LID calls also in the number's chat; subsections Answered, Not answered and Rejected, each with Voice and Video.
  • Deleted WhatsApp messages and calls (Android) recovered from the database bytes and shown in chats and Calls, marked “deleted, recovered: to be verified”.
  • Chats: filter for deleted recovered messages or those only in the backup; Report window with buttons at the top and collapsible groups; fixed “database is locked” while the quick-search index is built.
  • WhatsApp calls with a contact without messages in separate “calls only” conversations, at the bottom of the Chats list.
  • Fixes: the Photos/Videos/Audio total now includes audio (new “Other files with metadata” subsection); date filters typed by hand; column drags that stayed stuck.
  • WhatsApp Business separate from WhatsApp: chats, decrypted backups, calls and registered number.
  • Telegram from ALEAPP: messages from cache4.db go into the chats; calls written as service messages (ALEAPP and iLEAPP) become calls with outcome and duration.
  • Transcriptions corrected and confirmed by the analyst, with versions, examiner, date and SHA-256 of the text in the log; category "Confirmed transcriptions".
  • Transcription model: the hash declared by Hugging Face is read when the window opens; if it has changed it is stated and the download goes ahead with it; interrupted downloads resume; a wrong file is explained (web page, incomplete, altered); hash can be typed by hand for an offline computer.
  • Windows like the computer's for preview, chats, database manager, map, guide and full-screen Timeline: move, resize, minimise to the "Open windows" bar, full screen.
  • Date format selectable (day/month/year, ISO, month/day/year, month in letters); data stays ISO.
  • Chats: the two searches are separate. The search in the conversation list is no longer copied into "Search in the conversation", which hid the messages when looking for a name or number; that box now also finds the sender's name and number, as well as the text.
  • Case search while an analysis is writing. Instead of “database is locked” it waits, shows a large notice and tries again by itself; for a real error it offers ↻ Try again and the advice to close RepertIA (the black window too) and reopen it.
  • Database manager: a word found in deleted records opens the records already filtered and highlighted.
  • Import notices in the menu bar; new-version notice on request only, never with a case open; .m4a recordings counted as audio, not video.
  • iLEAPP 2026.4.6 and ALEAPP 2026.4.5: Hickman's iOS 17 624 artifacts instead of 246.

Tested: acceptance test 660/660 in Italian and English from the Mac package and 660/660 on Windows 11, 79/79 on public images; navigation 410/410 (Chromium); browser tests of windows, transcriptions and media; model download with a fake server (web page, interruptions, changed hash).

Not tested: WhatsApp Business on a real phone (the public images have none: tested on a database read as Business and a fake backup); Linux with this version.


[sicurezza] Questa versione corregge una vulnerabilità grave: aggiornare dalla 3.0.0 e dalle versioni precedenti. Vedi Sicurezza più sotto.

RepertIA funziona completamente SENZA intelligenza artificiale. Il modello IA locale non è incluso nei pacchetti: è una scelta facoltativa dell'utente (LM Studio, llama-server o Ollama). Senza modello funzionano tutte le analisi, le ricerche e i report.

Scarica

Sistema File
Windows (installazione) RepertIA-3.0.1-Setup.exe
Windows (portatile) RepertIA-3.0.1-Windows.zip
Mac (Apple Silicon) RepertIA-3.0.1-Mac.zip
Linux x86_64 (sperimentale) [RepertIA-3.0.1-Linux.tar.gz](http...
Read more

RepertIA 3.0.0

Choose a tag to compare

@silvexe silvexe released this 03 Nov 15:15
a73e488

🇮🇹 Testo italiano più sotto.

RepertIA works completely WITHOUT artificial intelligence. The local AI model is not included in the packages: it is an optional choice of the user (LM Studio, llama-server or Ollama). Without a model all analyses, searches and reports work.

Download

System File
Windows (installer) RepertIA-3.0.0-Setup.exe
Windows (portable) RepertIA-3.0.0-Windows.zip
Mac (Apple Silicon) RepertIA-3.0.0-Mac.zip
Linux x86_64 (experimental) RepertIA-3.0.0-Linux.tar.gz
Acceptance test (collaudo) RepertIA-collaudo.zip
Demo video English · Italian
SHA-256 checksums SHA256SUMS.txt
Illustrated guide (HTML, Italian and English) RepertIA-guida-3.0.0.html

Sources of the third-party components (GPL/LGPL): RepertIA-2.19.0-sorgenti-terze-parti.tar, poppler-26.09.0.tar.xz, ffmpeg-n9.0.2-36-g6882969ce9-sorgenti.tar.gz, and new in this version 7z2605-src.tar.xz and Image-ExifTool-13.60.tar.gz.

Important: photo coordinates

Up to 2.21.0 the GPS coordinates of photos and videos lost their sign: South and West came out positive. Lists, reports, portable reports and agent answers about photos in those areas are wrong. 3.0.0 corrects the coordinates when a case is opened and records it in the log; reports already produced must be redone.

License change

From 3.0.0 RepertIA is released under AGPL-3.0-or-later. Anyone can use it for free, including for paid professional work. Anyone who builds it into software they distribute or offer over a network must release that software's source code under the same license. Versions up to 2.21.0 remain under GPL-3.0-or-later.

What's new in 3.0.0

  • Database manager. SQLite databases of the case opened read-only on a working copy, with WAL, SQL queries, search, CSV with SHA-256.

  • Deleted records. A separate view, "to be verified", with page, offset and hex.

  • Map. Positions and flights on a local map, with no network from an open case; tables by date, animation, a Locations and flights item in the tree. Road maps are downloaded only with no case open.

  • Drones. DJI logs up to version 12, SRT, Litchi and Airdata CSV, Autel, PX4 ULog, tlog, DataFlash, also found automatically in forensic copies.

  • Single search. Case search now also covers file names, document text and metadata, states what it did not cover, and fixes cases where chat messages were not found.

  • Interface. Reset interface button, AI model menu, ⓘ button with legal notices; Bookmarks as a source of the Timeline chart; Back, Forward and Ask the agent in the database manager.

  • Fix. Link forensic copy on smartphone cases did not update the content path (defect in 2.21.0).

  • Timeline by item. Table and chart of a single item (the messages of one app, calls, an artifact group, a bookmark group), with column filters; Timeline and preview also full screen.

  • Prompt dictation. The 🎤 button transcribes locally with whisper.cpp; audio is deleted at once and the text is checked and sent by hand.

  • AI agent. Lists in pages that state the rows read out of how many, count tools, and an “Analysis NOT complete” notice when it runs out of steps.

  • Portable report. Same sections and tree as the case, column views, Timeline by item and bookmarks, full-screen views.

  • Chats. A chat opened from an item shows only that conversation, with Show all; the chat window can be resized from its sides.

  • Favourite map points. ★ in the Positions table: only the chosen points, also from different apps, are shown, animated and exported, and they enter the Bookmarks with the date of the position.

  • Open tabs. Each tree item opened stays as a tab above the table, with Open tabs (N) and Close all; clicking a row opens the preview.

  • Calls in columns. Direction, contact, app, duration and answered as separate filterable columns.

  • Timeline Source menu with search inside and Bookmarks as third item; the guide also from the Case menu; confirmations inside the page; the open case reopens after a reload.

  • Maps with roads and names. Downloaded maps show roads by type, buildings, green areas, water and street and place names, with fonts included: no external request. Street names need the maximum detail.

Tested: AI agent with a real local model (Qwen 3.8 27B in LM Studio) on a test case: messages, artifacts and locations; acceptance test 568/568 in Italian and English from the Mac package, 77/77 on public images; navigation 410/410 (Chromium); acceptance test passed on Windows with the final package. tlog, ULog and DataFlash give the same results as pymavlink and pyulog on public files.

Not tested: dictation with a real microphone; Linux with this version; a real Autel log (the reader is tested on built files, and each flight says so); the new search on very large phones. Deleted records are a partial recovery: about 55% of deleted rows in the independent test.

Updated components: plaso 20261027, Pillow 13.0.0, openai 3.42.0, XlsxWriter 3.3.1, certifi 2026.10.23, 7-Zip 26.05, ExifTool 13.60. Tesseract stays at 5.4.0 on Windows (no newer UB Mannheim build), Python at 3.12.15.


RepertIA funziona completamente SENZA intelligenza artificiale. Il modello IA locale non è incluso nei pacchetti: è una scelta facoltativa dell'utente (LM Studio, llama-server o Ollama). Senza modello funzionano tutte le analisi, le ricerche e i report.

Scarica

Sistema File
Windows (installazione) RepertIA-3.0.0-Setup.exe
Windows (portatile) RepertIA-3.0.0-Windows.zip
Mac (Apple Silicon) RepertIA-3.0.0-Mac.zip
Linux x86_64 (sperimentale) RepertIA-3.0.0-Linux.tar.gz
Collaudo RepertIA-collaudo.zip
Video dimostrativo italiano · inglese
Impronte SHA-256 SHA256SUMS.txt
Guida illustrata (HTML, italiano e inglese) RepertIA-guida-3.0.0.html

Sorgenti dei componenti di terze parti (GPL/LGPL): RepertIA-2.19.0-sorgenti-terze-parti.tar, poppler-26.09.0.tar.xz, ffmpeg-n9.0.2-36-g6882969ce9-sorgenti.tar.gz e, nuovi in questa versione, 7z2605-src.tar.xz e Image-ExifTool-13.60.tar.gz.

Importante: coordinate delle foto

Fino alla 2.21.0 le coordinate GPS di foto e video perdevano il segno: Sud e Ovest risultavano positivi. Elenchi, report, report portatili e risposte dell'agente sulle foto di quelle zone sono sbagliati. La 3.0.0 corregge le coordinate all'apertura del caso e lo registra; i report già prodotti vanno rifatti.

Cambio di licenza

Dalla 3.0.0 RepertIA è rilasciato con licenza AGPL-3.0-or-later. Chiunque può usarlo gratis, anche per il proprio lavoro professionale a pagamento. Chi lo inserisce in un software che distribuisce o offre in rete deve pubblicarne il codice sorgente con la stessa licenza. Le versioni fino alla 2.21.0 restano sotto GPL-3.0-or-later.

Novità della 3.0.0

  • Gestore dei database. Database SQLite del caso aperti in sola lettura su una copia di lavoro, con WAL, query SQL, ricerca, CSV con SHA-256.

  • Record cancellati. Una vista separata, «da verificare», con pagina, offset ed esadecimale.

  • Mappa. Posizioni e voli su mappa locale, senza rete da un caso aperto; tabelle per data, animazione, voce Posizioni e voli nell'albero. Le mappe stradali si scaricano solo senza un caso aperto.

  • Droni. Registri DJI fino alla versione 12, SRT, CSV Litchi e Airdata, Autel, PX4 ULog, tlog, DataFlash, trovati da soli anche nelle copie forensi.

  • Ricerca unica. La ricerca nel caso copre ora anche nomi dei file, testo dei documenti e metadati, dichiara cosa non ha coperto e corregge i casi in cui i messaggi delle chat non si trovavano.

  • Interfaccia. Pulsante Ripristina interfaccia, menu Modello IA, pulsante ⓘ con le informazioni legali; Preferiti come fonte del grafico della Timeline; Indietro, Avanti e Chiedi all'agente nel gestore dei database.

  • Correzione. Collega copia forense sui casi smartphone non aggiornava il percorso dei contenuti (difetto della 2.21.0).

  • Timeline per evidenza. Tabella e grafico di una sola evidenza (i messaggi di un'app, le chiamate, un gruppo di artefatti, un gruppo di preferiti), con i filtri di colonna; Timeline e anteprima anche a schermo intero.

  • **Dettatura del...

Read more

RepertIA 2.21.0

Choose a tag to compare

@silvexe silvexe released this 31 Oct 12:00

⚠️ Wrong GPS coordinates of photos and videos in this version: use RepertIA 3.0.0 or later.
The GPS metadata of photos and videos lost its sign: South latitudes and West longitudes came out positive, so those positions are wrong (for example a photo taken in North Carolina, longitude -78.87, is shown as +78.87). North and East positions are not affected. Chat locations and iLEAPP/ALEAPP artifacts are not affected.
The error is in lists, reports, portable reports, exports, answers of the AI agent and any use of those coordinates. The defect has been present at least since 2.19.0.
What to do: open the case with 3.0.0, which recalculates the coordinates once and records it in the case log, then redo any report with photo or video coordinates in those areas. Reports already delivered do not change: check them and correct them where necessary.


⚠️ Coordinate GPS di foto e video errate in questa versione: usare RepertIA 3.0.0 o successiva.
I metadati GPS di foto e video perdevano il segno: latitudini Sud e longitudini Ovest risultavano positive, quindi quelle posizioni sono sbagliate (per esempio una foto scattata in North Carolina, longitudine -78.87, compare come +78.87). Le posizioni a Nord e a Est non sono interessate, come non lo sono le posizioni delle chat e gli artefatti di iLEAPP/ALEAPP.
L'errore è negli elenchi, nei report, nei report portatili, nelle esportazioni, nelle risposte dell'agente IA e in ogni uso di quelle coordinate. Il difetto è presente almeno dalla 2.19.0.
Cosa fare: aprire il caso con la 3.0.0, che ricalcola le coordinate una volta sola e lo registra nel registro del caso, poi rifare i report con coordinate di foto o video di quelle zone. I report già consegnati non cambiano: vanno ricontrollati e, se serve, corretti.

🇮🇹 Testo italiano più sotto.

RepertIA works completely WITHOUT artificial intelligence. The local AI model is not included in the packages: it is an optional choice of the user (LM Studio, llama-server or Ollama), which can be used or not. Without a model all analyses, searches and reports work just the same.

Download

System File
Windows (installer) RepertIA-2.21.0-Setup.exe
Windows (portable) RepertIA-2.21.0-Windows.zip
Mac (Apple Silicon) RepertIA-2.21.0-Mac.zip
Linux x86_64 (experimental) RepertIA-2.21.0-Linux.tar.gz
Acceptance test (collaudo) RepertIA-collaudo.zip
SHA-256 checksums SHA256SUMS.txt
Illustrated guide (PDF) English · Italiano

Sources of the third-party disk components (GPL/LGPL, unchanged since 2.19.0): RepertIA-2.19.0-sorgenti-terze-parti.tar and poppler-26.09.0.tar.xz, among the files below; FFmpeg (LGPL, new in 2.20): ffmpeg-n9.0.2-36-g6882969ce9-sorgenti.tar.gz, the exact source of the included build. iLEAPP and ALEAPP are MIT-licensed; their two LGPL libraries (pytypedstream, simplekml) are pure Python and their source is in the package.

What's new in 2.21.0

  • Bookmarks. A chat's record now has Open chat. Export files saves the whole chat (HTML, CSV, attachments, SHA-256 in the manifest), with an optional period; the report contains the chat text (first 2,000 messages, complete in the portable report).
  • Bookmark timeline. All bookmarks in order of event date, with what each date refers to; also in the report and as CSV.
  • Link forensic copy (Case menu). A case moved to another computer finds its copy again: the copy is accepted only with the same SHA-256 and the operation stays in the log.
  • Export diagnostic logs. A new technical log with no case data and a mandatory preview, also on the start page.
  • iLEAPP/ALEAPP. Limit raised from 500,000 to 2,000,000 rows and, beyond it, small tables go before huge ones: on a test iOS 17 iPhone, 20 of 21 million rows are FSEvents.

Tested: acceptance test 448/448 in Italian and English from the Mac package, 77/77 on public images; navigation 66/66 (Chromium). Acceptance test on Windows with the final package passed (reported by the author). Not tested: Linux with this version; the new row limit on a full iOS 17 case (time and database size); WebKit. Third-party components and the PDF guides are those of 2.20.3.

What's new in 2.20.3

Two fixes for WhatsApp on Android.

  • msgstore.db not read. A defect stopped the whole database being read when an attachment followed a call in a chat (error 'int' object has no attribute 'find'). It affects Mac, Windows and Linux from 2.20.0. If the notices of a case show msgstore.db: not read, re-read it with Additional analyses → Chats and address books.
  • crypt15 backups. They are now decrypted with encrypted_backup.key, if it is in the extraction, or with the 64-digit key entered by the analyst, which stays in memory only. Earlier manuals said the crypt15 key is not on the phone: that was wrong.
  • The illustrated guides, in Italian and English, are now attached here.

Tested: acceptance test 437/437 in Italian and in English from the assembled Mac package (77/77 on public images); 437/437 on Windows 11 with the fixes, before the packages were assembled; a real public crypt15 backup from wa-crypt-tools. On the public Android 14 image the result is identical to 2.20.2, row by row: that phone does not show the defect, which was reproduced on constructed data. Not tested: a crypt15 with real messages, the final Windows package, the Linux package.

What's new in 2.20.2

Fix for smartphone cases on Windows. On Windows, iLEAPP ends the lines of its TSV files with a double line break and RepertIA imported an empty row after each real row: a table of N rows became 2N+1.

  • Who is affected: only smartphone cases prepared on Windows with 2.20.1. Mac and Linux are not affected, nor are ALEAPP results (Android).
  • Effects: empty rows in all iLEAPP artifacts, inflated counts, searches and reports, and non-existent calls may appear.
  • What to do: redo those cases and any reports made from them. When such a case is opened, RepertIA shows a warning; it does not change the case.
  • iLEAPP source paths are now always cited with /, and the acceptance test checks that no empty rows enter a case.

Tested: acceptance test 433/433 in Italian and in English from the assembled Mac package (77/77 on public images); 433/433 on Windows 11 with the final package (77/77 on public images). Not tested: the Linux package.

What's new in 2.20.1

  • AI Act (Regulation (EU) 2024/1689): findings written by the agent are marked in findings.json and in every report (Markdown, Word, PDF, portable) as «Generated by AI model (name) – to be checked» until the analyst presses «I confirm, verified» (operator and date recorded, also in the hash-chained log); the report says that every finding was verified only if they all are; Word and PDF metadata declare AI-generated text. A fixed label under every agent answer, «automatic OCR text» and «automatic transcription» labels, an explicit warning before using an LLM server outside the local network (recorded in the case; the report then says «external server indicated by the analyst»). New AI_ACT.en.md: intended purpose, excluded uses, Article 6(3) assessment, Article 50, note for adopting offices (not legal advice).

2.20.1 is the first published release of the 2.20 series (2.20.0 was not released separately); everything below is also new compared with 2.19.0.

What's new in 2.20 (compared with 2.19.0)

  • Smartphones (iPhone and Android). The start page now offers 💽 Mass storage (as before) and 📱 Smartphone. A smartphone case is created from a full file system extraction: zip (Cellebrite FFS, GrayKey, others), tar, tar.gz (read from a decompressed derived copy with SHA-256) or folder. Files are read from the extraction without copying them; tree, timeline, searches, document text, metadata, hashes, previews, reports and portable report work as for disks.
  • Chats: RepertIA's own readers for WhatsApp (iPhone and Android), iMessage/SMS and Android SMS/MMS, with names from the address books, messages still only in the -wal file, attachments linked to the files and the reference to database, table and row. Chat view with bubbles and filters, ⭐ bookmarks and 📌 findings on single messages, also in the portable report. In the Artifacts, conversations are split by app and show both parties (this device and the other number or contact, short codes marked as such; groups with their participants), sent/received messages, attachments and last message, with 💬 Open chat. New AI agent tools for chats.
  • iLEAPP 2026.4.5 and ALEAPP 2026.4.4 (Alexis Brignoni and contributors, MIT licence) included: their artifacts go into the case, split in the tree by iLEAPP/ALEAPP category and by artifact with row counts; the details show «field: value» with dates in the chosen time zone; version and fingerprint are recorded.
  • Chats of the other apps and Calls: chats that RepertIA does not read itself (Telegram, Discord, Instagram, Messenger, Goo...
Read more

RepertIA 2.20.3

Choose a tag to compare

@silvexe silvexe released this 30 Oct 17:42

⚠️ Wrong GPS coordinates of photos and videos in this version: use RepertIA 3.0.0 or later.
The GPS metadata of photos and videos lost its sign: South latitudes and West longitudes came out positive, so those positions are wrong (for example a photo taken in North Carolina, longitude -78.87, is shown as +78.87). North and East positions are not affected. Chat locations and iLEAPP/ALEAPP artifacts are not affected.
The error is in lists, reports, portable reports, exports, answers of the AI agent and any use of those coordinates. The defect has been present at least since 2.19.0.
What to do: open the case with 3.0.0, which recalculates the coordinates once and records it in the case log, then redo any report with photo or video coordinates in those areas. Reports already delivered do not change: check them and correct them where necessary.


⚠️ Coordinate GPS di foto e video errate in questa versione: usare RepertIA 3.0.0 o successiva.
I metadati GPS di foto e video perdevano il segno: latitudini Sud e longitudini Ovest risultavano positive, quindi quelle posizioni sono sbagliate (per esempio una foto scattata in North Carolina, longitudine -78.87, compare come +78.87). Le posizioni a Nord e a Est non sono interessate, come non lo sono le posizioni delle chat e gli artefatti di iLEAPP/ALEAPP.
L'errore è negli elenchi, nei report, nei report portatili, nelle esportazioni, nelle risposte dell'agente IA e in ogni uso di quelle coordinate. Il difetto è presente almeno dalla 2.19.0.
Cosa fare: aprire il caso con la 3.0.0, che ricalcola le coordinate una volta sola e lo registra nel registro del caso, poi rifare i report con coordinate di foto o video di quelle zone. I report già consegnati non cambiano: vanno ricontrollati e, se serve, corretti.

🇮🇹 Testo italiano più sotto.

RepertIA works completely WITHOUT artificial intelligence. The local AI model is not included in the packages: it is an optional choice of the user (LM Studio, llama-server or Ollama), which can be used or not. Without a model all analyses, searches and reports work just the same.

Download

System File
Windows (installer) RepertIA-2.20.3-Setup.exe
Windows (portable) RepertIA-2.20.3-Windows.zip
Mac (Apple Silicon) RepertIA-2.20.3-Mac.zip
Linux x86_64 (experimental) RepertIA-2.20.3-Linux.tar.gz
Acceptance test (collaudo) RepertIA-collaudo.zip
SHA-256 checksums SHA256SUMS.txt
Illustrated guide (PDF) English · Italiano

Sources of the third-party disk components (GPL/LGPL, unchanged since 2.19.0): RepertIA-2.19.0-sorgenti-terze-parti.tar and poppler-26.09.0.tar.xz, among the files below; FFmpeg (LGPL, new in 2.20): ffmpeg-n9.0.2-36-g6882969ce9-sorgenti.tar.gz, the exact source of the included build. iLEAPP and ALEAPP are MIT-licensed; their two LGPL libraries (pytypedstream, simplekml) are pure Python and their source is in the package.

What's new in 2.20.3

Two fixes for WhatsApp on Android.

  • msgstore.db not read. A defect stopped the whole database being read when an attachment followed a call in a chat (error 'int' object has no attribute 'find'). It affects Mac, Windows and Linux from 2.20.0. If the notices of a case show msgstore.db: not read, re-read it with Additional analyses → Chats and address books.
  • crypt15 backups. They are now decrypted with encrypted_backup.key, if it is in the extraction, or with the 64-digit key entered by the analyst, which stays in memory only. Earlier manuals said the crypt15 key is not on the phone: that was wrong.
  • The illustrated guides, in Italian and English, are now attached here.

Tested: acceptance test 437/437 in Italian and in English from the assembled Mac package (77/77 on public images); 437/437 on Windows 11 with the fixes, before the packages were assembled; a real public crypt15 backup from wa-crypt-tools. On the public Android 14 image the result is identical to 2.20.2, row by row: that phone does not show the defect, which was reproduced on constructed data. Not tested: a crypt15 with real messages, the final Windows package, the Linux package.

What's new in 2.20.2

Fix for smartphone cases on Windows. On Windows, iLEAPP ends the lines of its TSV files with a double line break and RepertIA imported an empty row after each real row: a table of N rows became 2N+1.

  • Who is affected: only smartphone cases prepared on Windows with 2.20.1. Mac and Linux are not affected, nor are ALEAPP results (Android).
  • Effects: empty rows in all iLEAPP artifacts, inflated counts, searches and reports, and non-existent calls may appear.
  • What to do: redo those cases and any reports made from them. When such a case is opened, RepertIA shows a warning; it does not change the case.
  • iLEAPP source paths are now always cited with /, and the acceptance test checks that no empty rows enter a case.

Tested: acceptance test 433/433 in Italian and in English from the assembled Mac package (77/77 on public images); 433/433 on Windows 11 with the final package (77/77 on public images). Not tested: the Linux package.

What's new in 2.20.1

  • AI Act (Regulation (EU) 2024/1689): findings written by the agent are marked in findings.json and in every report (Markdown, Word, PDF, portable) as «Generated by AI model (name) – to be checked» until the analyst presses «I confirm, verified» (operator and date recorded, also in the hash-chained log); the report says that every finding was verified only if they all are; Word and PDF metadata declare AI-generated text. A fixed label under every agent answer, «automatic OCR text» and «automatic transcription» labels, an explicit warning before using an LLM server outside the local network (recorded in the case; the report then says «external server indicated by the analyst»). New AI_ACT.en.md: intended purpose, excluded uses, Article 6(3) assessment, Article 50, note for adopting offices (not legal advice).

2.20.1 is the first published release of the 2.20 series (2.20.0 was not released separately); everything below is also new compared with 2.19.0.

What's new in 2.20 (compared with 2.19.0)

  • Smartphones (iPhone and Android). The start page now offers 💽 Mass storage (as before) and 📱 Smartphone. A smartphone case is created from a full file system extraction: zip (Cellebrite FFS, GrayKey, others), tar, tar.gz (read from a decompressed derived copy with SHA-256) or folder. Files are read from the extraction without copying them; tree, timeline, searches, document text, metadata, hashes, previews, reports and portable report work as for disks.
  • Chats: RepertIA's own readers for WhatsApp (iPhone and Android), iMessage/SMS and Android SMS/MMS, with names from the address books, messages still only in the -wal file, attachments linked to the files and the reference to database, table and row. Chat view with bubbles and filters, ⭐ bookmarks and 📌 findings on single messages, also in the portable report. In the Artifacts, conversations are split by app and show both parties (this device and the other number or contact, short codes marked as such; groups with their participants), sent/received messages, attachments and last message, with 💬 Open chat. New AI agent tools for chats.
  • iLEAPP 2026.4.5 and ALEAPP 2026.4.4 (Alexis Brignoni and contributors, MIT licence) included: their artifacts go into the case, split in the tree by iLEAPP/ALEAPP category and by artifact with row counts; the details show «field: value» with dates in the chosen time zone; version and fingerprint are recorded.
  • Chats of the other apps and Calls: chats that RepertIA does not read itself (Telegram, Discord, Instagram, Messenger, Google Messages, Snapchat, LINE, Viber, Kik, TikTok, X, Zoom, Wire, TextNow, Burner and others; Wickr metadata only) are derived from the iLEAPP/ALEAPP rows into Chat messages and the chat view; a new Calls view has one row per call with all its sources (duplicates across sources merged, differing values flagged). Mapping in forense_mobile_leapp_mappa.json.
  • Chat view: bookmark, finding and Export chat (HTML + CSV with forensic header and SHA-256 in the hash-chained log) for the whole conversation; attachment preview over the chat with ← → arrows.
  • Back / Forward with breadcrumbs across the program (also browser Back, Alt+←, Cmd+[) and in the portable report; resizable columns and a more readable Details column.
  • Cited files: when a row names a file (Google Photos «File Path /storage/emulated/0/…», chat attachments, LNK and jump list targets, downloads, Recycle Bin, Prefetch, Amcache, plaso rows, paths quoted by the AI agent, iLEAPP/ALEAPP «media/…»), RepertIA finds it in the extraction or image — by path with a mapping table for phone, Windows and macOS paths (forense_percorsi.json), by hash, or by name and size — joining folder and name fields of the same row into a full path; the details panel shows **one 📎 cited file box per diff...
Read more

RepertIA 2.20.2

Choose a tag to compare

@silvexe silvexe released this 30 Oct 08:50

⚠️ Wrong GPS coordinates of photos and videos in this version: use RepertIA 3.0.0 or later.
The GPS metadata of photos and videos lost its sign: South latitudes and West longitudes came out positive, so those positions are wrong (for example a photo taken in North Carolina, longitude -78.87, is shown as +78.87). North and East positions are not affected. Chat locations and iLEAPP/ALEAPP artifacts are not affected.
The error is in lists, reports, portable reports, exports, answers of the AI agent and any use of those coordinates. The defect has been present at least since 2.19.0.
What to do: open the case with 3.0.0, which recalculates the coordinates once and records it in the case log, then redo any report with photo or video coordinates in those areas. Reports already delivered do not change: check them and correct them where necessary.


⚠️ Coordinate GPS di foto e video errate in questa versione: usare RepertIA 3.0.0 o successiva.
I metadati GPS di foto e video perdevano il segno: latitudini Sud e longitudini Ovest risultavano positive, quindi quelle posizioni sono sbagliate (per esempio una foto scattata in North Carolina, longitudine -78.87, compare come +78.87). Le posizioni a Nord e a Est non sono interessate, come non lo sono le posizioni delle chat e gli artefatti di iLEAPP/ALEAPP.
L'errore è negli elenchi, nei report, nei report portatili, nelle esportazioni, nelle risposte dell'agente IA e in ogni uso di quelle coordinate. Il difetto è presente almeno dalla 2.19.0.
Cosa fare: aprire il caso con la 3.0.0, che ricalcola le coordinate una volta sola e lo registra nel registro del caso, poi rifare i report con coordinate di foto o video di quelle zone. I report già consegnati non cambiano: vanno ricontrollati e, se serve, corretti.

⚠️ Use v2.20.3 / Usa la v2.20.3. This version may fail to read WhatsApp msgstore.db on Android (notice msgstore.db: not read), on every system. Cases with that notice must be re-read with 2.20.3.

Questa versione può non leggere msgstore.db di WhatsApp su Android (avviso msgstore.db: non letto), su tutti i sistemi. I casi con quell'avviso vanno riletti con la 2.20.3.

🇮🇹 Testo italiano più sotto.

RepertIA works completely WITHOUT artificial intelligence. The local AI model is not included in the packages: it is an optional choice of the user (LM Studio, llama-server or Ollama), which can be used or not. Without a model all analyses, searches and reports work just the same.

Download

System File
Windows (installer) RepertIA-2.20.2-Setup.exe
Windows (portable) RepertIA-2.20.2-Windows.zip
Mac (Apple Silicon) RepertIA-2.20.2-Mac.zip
Linux x86_64 (experimental) RepertIA-2.20.2-Linux.tar.gz
Acceptance test (collaudo) RepertIA-collaudo.zip
SHA-256 checksums SHA256SUMS.txt

Sources of the third-party disk components (GPL/LGPL, unchanged since 2.19.0): RepertIA-2.19.0-sorgenti-terze-parti.tar and poppler-26.09.0.tar.xz, among the files below; FFmpeg (LGPL, new in 2.20): ffmpeg-n9.0.2-36-g6882969ce9-sorgenti.tar.gz, the exact source of the included build. iLEAPP and ALEAPP are MIT-licensed; their two LGPL libraries (pytypedstream, simplekml) are pure Python and their source is in the package.

What's new in 2.20.2

Fix for smartphone cases on Windows. On Windows, iLEAPP ends the lines of its TSV files with a double line break and RepertIA imported an empty row after each real row: a table of N rows became 2N+1.

  • Who is affected: only smartphone cases prepared on Windows with 2.20.1. Mac and Linux are not affected, nor are ALEAPP results (Android).
  • Effects: empty rows in all iLEAPP artifacts, inflated counts, searches and reports, and non-existent calls may appear.
  • What to do: redo those cases and any reports made from them. When such a case is opened, RepertIA shows a warning; it does not change the case.
  • iLEAPP source paths are now always cited with /, and the acceptance test checks that no empty rows enter a case.

Tested: acceptance test 433/433 in Italian and in English from the assembled Mac package (77/77 on public images); 433/433 on Windows 11 with the final package (77/77 on public images). Not tested: the Linux package.

What's new in 2.20.1

  • AI Act (Regulation (EU) 2024/1689): findings written by the agent are marked in findings.json and in every report (Markdown, Word, PDF, portable) as «Generated by AI model (name) – to be checked» until the analyst presses «I confirm, verified» (operator and date recorded, also in the hash-chained log); the report says that every finding was verified only if they all are; Word and PDF metadata declare AI-generated text. A fixed label under every agent answer, «automatic OCR text» and «automatic transcription» labels, an explicit warning before using an LLM server outside the local network (recorded in the case; the report then says «external server indicated by the analyst»). New AI_ACT.en.md: intended purpose, excluded uses, Article 6(3) assessment, Article 50, note for adopting offices (not legal advice).

2.20.1 is the first published release of the 2.20 series (2.20.0 was not released separately); everything below is also new compared with 2.19.0.

What's new in 2.20 (compared with 2.19.0)

  • Smartphones (iPhone and Android). The start page now offers 💽 Mass storage (as before) and 📱 Smartphone. A smartphone case is created from a full file system extraction: zip (Cellebrite FFS, GrayKey, others), tar, tar.gz (read from a decompressed derived copy with SHA-256) or folder. Files are read from the extraction without copying them; tree, timeline, searches, document text, metadata, hashes, previews, reports and portable report work as for disks.
  • Chats: RepertIA's own readers for WhatsApp (iPhone and Android), iMessage/SMS and Android SMS/MMS, with names from the address books, messages still only in the -wal file, attachments linked to the files and the reference to database, table and row. Chat view with bubbles and filters, ⭐ bookmarks and 📌 findings on single messages, also in the portable report. In the Artifacts, conversations are split by app and show both parties (this device and the other number or contact, short codes marked as such; groups with their participants), sent/received messages, attachments and last message, with 💬 Open chat. New AI agent tools for chats.
  • iLEAPP 2026.4.5 and ALEAPP 2026.4.4 (Alexis Brignoni and contributors, MIT licence) included: their artifacts go into the case, split in the tree by iLEAPP/ALEAPP category and by artifact with row counts; the details show «field: value» with dates in the chosen time zone; version and fingerprint are recorded.
  • Chats of the other apps and Calls: chats that RepertIA does not read itself (Telegram, Discord, Instagram, Messenger, Google Messages, Snapchat, LINE, Viber, Kik, TikTok, X, Zoom, Wire, TextNow, Burner and others; Wickr metadata only) are derived from the iLEAPP/ALEAPP rows into Chat messages and the chat view; a new Calls view has one row per call with all its sources (duplicates across sources merged, differing values flagged). Mapping in forense_mobile_leapp_mappa.json.
  • Chat view: bookmark, finding and Export chat (HTML + CSV with forensic header and SHA-256 in the hash-chained log) for the whole conversation; attachment preview over the chat with ← → arrows.
  • Back / Forward with breadcrumbs across the program (also browser Back, Alt+←, Cmd+[) and in the portable report; resizable columns and a more readable Details column.
  • Cited files: when a row names a file (Google Photos «File Path /storage/emulated/0/…», chat attachments, LNK and jump list targets, downloads, Recycle Bin, Prefetch, Amcache, plaso rows, paths quoted by the AI agent, iLEAPP/ALEAPP «media/…»), RepertIA finds it in the extraction or image — by path with a mapping table for phone, Windows and macOS paths (forense_percorsi.json), by hash, or by name and size — joining folder and name fields of the same row into a full path; the details panel shows one 📎 cited file box per different file («given in the fields: Media, Directory + Filename») with the result in plain words — ✅ found with certainty, ⚠️ probable, to be verified (with the list of candidates), ❌ not present — a «?» explaining the three levels, a 📁 folder link, copies with the same final path under Technical details, its preview and Show in the tree / Export buttons, separate from the source database, the table shows one thumbnail per row, the Word/PDF case report states result and method for every cited file in Bookmarks, and a missing file is stated as «file not present in the extraction». WhatsApp attachments are verified with their SHA-256 (file_hash); when the file is missing the thumbnail stored in the database is shown.
  • iOS keychain (optional): an iPhone keychain acquired separately (e.g. GrayKey) can be given in the new case form or in the case panel. RepertIA records its SHA-256 in the hash-chained log, does not copy it into the case and passes it to iLEAPP with --keychain: **decryption and read...
Read more

RepertIA 2.20.1

Choose a tag to compare

@silvexe silvexe released this 29 Oct 17:53

⚠️ Wrong GPS coordinates of photos and videos in this version: use RepertIA 3.0.0 or later.
The GPS metadata of photos and videos lost its sign: South latitudes and West longitudes came out positive, so those positions are wrong (for example a photo taken in North Carolina, longitude -78.87, is shown as +78.87). North and East positions are not affected. Chat locations and iLEAPP/ALEAPP artifacts are not affected.
The error is in lists, reports, portable reports, exports, answers of the AI agent and any use of those coordinates. The defect has been present at least since 2.19.0.
What to do: open the case with 3.0.0, which recalculates the coordinates once and records it in the case log, then redo any report with photo or video coordinates in those areas. Reports already delivered do not change: check them and correct them where necessary.


⚠️ Coordinate GPS di foto e video errate in questa versione: usare RepertIA 3.0.0 o successiva.
I metadati GPS di foto e video perdevano il segno: latitudini Sud e longitudini Ovest risultavano positive, quindi quelle posizioni sono sbagliate (per esempio una foto scattata in North Carolina, longitudine -78.87, compare come +78.87). Le posizioni a Nord e a Est non sono interessate, come non lo sono le posizioni delle chat e gli artefatti di iLEAPP/ALEAPP.
L'errore è negli elenchi, nei report, nei report portatili, nelle esportazioni, nelle risposte dell'agente IA e in ogni uso di quelle coordinate. Il difetto è presente almeno dalla 2.19.0.
Cosa fare: aprire il caso con la 3.0.0, che ricalcola le coordinate una volta sola e lo registra nel registro del caso, poi rifare i report con coordinate di foto o video di quelle zone. I report già consegnati non cambiano: vanno ricontrollati e, se serve, corretti.

⚠️ Windows packages withdrawn / Pacchetti Windows ritirati. On Windows, this version imported empty rows from iLEAPP in smartphone cases: inflated counts and possible non-existent calls. Use v2.20.2. Smartphone cases and reports made on Windows with 2.20.1 must be redone. Mac and Linux are not affected.

Su Windows questa versione importava righe vuote da iLEAPP nei casi smartphone: conteggi gonfiati e possibili chiamate inesistenti. Usa la v2.20.2. I casi smartphone e i report fatti su Windows con la 2.20.1 vanno rifatti. Mac e Linux non sono interessati.

🇮🇹 Testo italiano più sotto.

RepertIA works completely WITHOUT artificial intelligence. The local AI model is not included in the packages: it is an optional choice of the user (LM Studio, llama-server or Ollama), which can be used or not. Without a model all analyses, searches and reports work just the same.

Download

System File
Windows (installer) RepertIA-2.20.1-Setup.exe
Windows (portable) RepertIA-2.20.1-Windows.zip
Mac (Apple Silicon) RepertIA-2.20.1-Mac.zip
Linux x86_64 (experimental) RepertIA-2.20.1-Linux.tar.gz
Acceptance test (collaudo) RepertIA-collaudo.zip
SHA-256 checksums SHA256SUMS.txt

Sources of the third-party disk components (GPL/LGPL, unchanged since 2.19.0): RepertIA-2.19.0-sorgenti-terze-parti.tar and poppler-26.09.0.tar.xz, among the files below; FFmpeg (LGPL, new in 2.20): ffmpeg-n9.0.2-36-g6882969ce9-sorgenti.tar.gz, the exact source of the included build. iLEAPP and ALEAPP are MIT-licensed; their two LGPL libraries (pytypedstream, simplekml) are pure Python and their source is in the package.

What's new in 2.20.1

  • AI Act (Regulation (EU) 2024/1689): findings written by the agent are marked in findings.json and in every report (Markdown, Word, PDF, portable) as «Generated by AI model (name) – to be checked» until the analyst presses «I confirm, verified» (operator and date recorded, also in the hash-chained log); the report says that every finding was verified only if they all are; Word and PDF metadata declare AI-generated text. A fixed label under every agent answer, «automatic OCR text» and «automatic transcription» labels, an explicit warning before using an LLM server outside the local network (recorded in the case; the report then says «external server indicated by the analyst»). New AI_ACT.en.md: intended purpose, excluded uses, Article 6(3) assessment, Article 50, note for adopting offices (not legal advice).

2.20.1 is the first published release of the 2.20 series (2.20.0 was not released separately); everything below is also new compared with 2.19.0.

What's new in 2.20 (compared with 2.19.0)

  • Smartphones (iPhone and Android). The start page now offers 💽 Mass storage (as before) and 📱 Smartphone. A smartphone case is created from a full file system extraction: zip (Cellebrite FFS, GrayKey, others), tar, tar.gz (read from a decompressed derived copy with SHA-256) or folder. Files are read from the extraction without copying them; tree, timeline, searches, document text, metadata, hashes, previews, reports and portable report work as for disks.
  • Chats: RepertIA's own readers for WhatsApp (iPhone and Android), iMessage/SMS and Android SMS/MMS, with names from the address books, messages still only in the -wal file, attachments linked to the files and the reference to database, table and row. Chat view with bubbles and filters, ⭐ bookmarks and 📌 findings on single messages, also in the portable report. In the Artifacts, conversations are split by app and show both parties (this device and the other number or contact, short codes marked as such; groups with their participants), sent/received messages, attachments and last message, with 💬 Open chat. New AI agent tools for chats.
  • iLEAPP 2026.4.5 and ALEAPP 2026.4.4 (Alexis Brignoni and contributors, MIT licence) included: their artifacts go into the case, split in the tree by iLEAPP/ALEAPP category and by artifact with row counts; the details show «field: value» with dates in the chosen time zone; version and fingerprint are recorded.
  • Chats of the other apps and Calls: chats that RepertIA does not read itself (Telegram, Discord, Instagram, Messenger, Google Messages, Snapchat, LINE, Viber, Kik, TikTok, X, Zoom, Wire, TextNow, Burner and others; Wickr metadata only) are derived from the iLEAPP/ALEAPP rows into Chat messages and the chat view; a new Calls view has one row per call with all its sources (duplicates across sources merged, differing values flagged). Mapping in forense_mobile_leapp_mappa.json.
  • Chat view: bookmark, finding and Export chat (HTML + CSV with forensic header and SHA-256 in the hash-chained log) for the whole conversation; attachment preview over the chat with ← → arrows.
  • Back / Forward with breadcrumbs across the program (also browser Back, Alt+←, Cmd+[) and in the portable report; resizable columns and a more readable Details column.
  • Cited files: when a row names a file (Google Photos «File Path /storage/emulated/0/…», chat attachments, LNK and jump list targets, downloads, Recycle Bin, Prefetch, Amcache, plaso rows, paths quoted by the AI agent, iLEAPP/ALEAPP «media/…»), RepertIA finds it in the extraction or image — by path with a mapping table for phone, Windows and macOS paths (forense_percorsi.json), by hash, or by name and size — joining folder and name fields of the same row into a full path; the details panel shows one 📎 cited file box per different file («given in the fields: Media, Directory + Filename») with the result in plain words — ✅ found with certainty, ⚠️ probable, to be verified (with the list of candidates), ❌ not present — a «?» explaining the three levels, a 📁 folder link, copies with the same final path under Technical details, its preview and Show in the tree / Export buttons, separate from the source database, the table shows one thumbnail per row, the Word/PDF case report states result and method for every cited file in Bookmarks, and a missing file is stated as «file not present in the extraction». WhatsApp attachments are verified with their SHA-256 (file_hash); when the file is missing the thumbnail stored in the database is shown.
  • iOS keychain (optional): an iPhone keychain acquired separately (e.g. GrayKey) can be given in the new case form or in the case panel. RepertIA records its SHA-256 in the hash-chained log, does not copy it into the case and passes it to iLEAPP with --keychain: decryption and reading are done by iLEAPP. The case states which keychain was used (supplied / found in the extraction / none). Secret values (passwords, keys, tokens) are hidden by default: «Show» reveals one at a time and is logged; they are left out of the portable report unless explicitly chosen and are never given to the AI agent. Chats decrypted by iLEAPP with the keychain (Signal, Session, SimpleX) appear in the chat view marked as such.
  • iOS sysdiagnose (optional, one or more): given in the new smartphone case form or in the case panel; RepertIA records its SHA-256 in the hash-chained log, does not copy it into the case and runs iLEAPP a second time on the archive; the rows go to the Sysdiagnose group of the artifacts, marked «from sysdia...
Read more

(Beta) RepertIA 2.19.0 – packages withdrawn / pacchetti ritirati

Choose a tag to compare

@silvexe silvexe released this 24 Oct 08:34

⚠️ Wrong GPS coordinates of photos and videos in this version: use RepertIA 3.0.0 or later.
The GPS metadata of photos and videos lost its sign: South latitudes and West longitudes came out positive, so those positions are wrong (for example a photo taken in North Carolina, longitude -78.87, is shown as +78.87). North and East positions are not affected. Chat locations and iLEAPP/ALEAPP artifacts are not affected.
The error is in lists, reports, portable reports, exports, answers of the AI agent and any use of those coordinates. The defect has been present at least since 2.19.0.
What to do: open the case with 3.0.0, which recalculates the coordinates once and records it in the case log, then redo any report with photo or video coordinates in those areas. Reports already delivered do not change: check them and correct them where necessary.


⚠️ Coordinate GPS di foto e video errate in questa versione: usare RepertIA 3.0.0 o successiva.
I metadati GPS di foto e video perdevano il segno: latitudini Sud e longitudini Ovest risultavano positive, quindi quelle posizioni sono sbagliate (per esempio una foto scattata in North Carolina, longitudine -78.87, compare come +78.87). Le posizioni a Nord e a Est non sono interessate, come non lo sono le posizioni delle chat e gli artefatti di iLEAPP/ALEAPP.
L'errore è negli elenchi, nei report, nei report portatili, nelle esportazioni, nelle risposte dell'agente IA e in ogni uso di quelle coordinate. Il difetto è presente almeno dalla 2.19.0.
Cosa fare: aprire il caso con la 3.0.0, che ricalcola le coordinate una volta sola e lo registra nel registro del caso, poi rifare i report con coordinate di foto o video di quelle zone. I report già consegnati non cambiano: vanno ricontrollati e, se serve, corretti.

🇮🇹 Testo italiano più sotto.

⚠️ The 2.19.0 packages have been withdrawn. Please download and use RepertIA 2.20.1, which includes everything in 2.19.0. This page remains as a record of the version; the program source code of 2.19.0 is still available below (Source code), together with the sources of the third-party components.

Sources of the third-party components (GPL/LGPL): RepertIA-2.19.0-sorgenti-terze-parti.tar and poppler-26.09.0.tar.xz, among the files below.

What was new in 2.19.0

  • User interface and case texts in English or Italian. Language selector at the top right; in the new-case form you choose the language of the case texts (artifacts, summaries, Markdown/Word/PDF reports, portable report, exported CSV files), saved with the case and shown in the case list and in the report. Earlier cases stay in Italian. Only the text changes: data, hashes, paths and values read from the disk do not change.
  • The translations are a dictionary (lingua_en.json, about 2,400 texts) included in the program fingerprint; the acceptance test runs in both languages (--lingua it|en).
  • Windows: bilingual installer (the language chosen at installation becomes RepertIA's default). README_EN.txt in the Mac and Windows packages.
  • The local language model receives its instructions and answers in the interface language.
  • New Linux package (experimental) for Ubuntu 24.04+ / Debian 13: ./installa.sh installs the tools with apt and prepares Python, plaso and the libraries at the same versions as the Mac and Windows packages. Same program, same fingerprint.

Tested: acceptance test 112/112 in Italian and 112/112 in English on the Mac, also run on Windows; on Linux in a development environment. English interface and portable report checked section by section. Not tested: installa.sh on a real Linux computer.

Documentation in English: README, manual, validation, change log.


⚠️ I pacchetti della 2.19.0 sono stati ritirati. Scaricare e usare RepertIA 2.20.1, che comprende tutto quello della 2.19.0. Questa pagina resta come traccia della versione; il codice sorgente del programma della 2.19.0 resta disponibile qui sotto (Source code), insieme ai sorgenti dei componenti di terze parti.

Sorgenti dei componenti di terze parti (GPL/LGPL): RepertIA-2.19.0-sorgenti-terze-parti.tar e poppler-26.09.0.tar.xz, tra i file qui sotto.

Novità della 2.19.0

  • Interfaccia e testi del caso in italiano o in inglese. Selettore della lingua in alto a destra; nel modulo del nuovo caso si sceglie la lingua dei testi del caso (artefatti, riepiloghi, report Markdown/Word/PDF, report portatile, CSV esportati), salvata nel caso e indicata nell'elenco dei casi e nel report. I casi precedenti restano in italiano. Cambia solo il testo: dati, hash, percorsi e valori letti dal disco non cambiano.
  • Le traduzioni sono un dizionario (lingua_en.json, circa 2.400 testi) incluso nell'impronta del programma; il collaudo si esegue in entrambe le lingue (--lingua it|en).
  • Windows: installer bilingue (la lingua scelta nell'installazione diventa quella predefinita di RepertIA). README_EN.txt nei pacchetti Mac e Windows.
  • Il modello linguistico locale riceve le istruzioni e risponde nella lingua dell'interfaccia.
  • Nuovo pacchetto Linux (sperimentale) per Ubuntu 24.04+ / Debian 13: ./installa.sh installa gli strumenti con apt e prepara Python, plaso e le librerie alle stesse versioni dei pacchetti Mac e Windows. Stesso programma, stessa impronta.

Prova: collaudo 112/112 in italiano e 112/112 in inglese sul Mac, eseguito anche su Windows; su Linux in un ambiente di sviluppo. Interfaccia e report portatile in inglese controllati sezione per sezione. Non provato: installa.sh su un vero computer Linux.