v0.9.1

[Ghassan-elsman]

New LNK & JumpList Parser:

• Full Rewrite: A_CJL_LNK_Claw.py has been entirely rewritten from the ground up for robust Automatic and Custom parsing.
• Advanced Parsing: Introduced deep parsing for DestList and property-stores.
• New Architecture: Implemented a new LnkStreamParser for better data stream handling.
• AppID Integration: Added AppID lookup via the new Known_AppIDs.csv to map internal IDs to human-readable application names.
• Resilience: Built new, highly resilient binary unpacking helpers to prevent crashes on corrupted or non-standard artifacts.

Prefetch Parser Enhancements:

• Improved parsing resilience and extended forensic data extraction capabilities.

Global UTC Utility Implementation:
- Standardized Formatting: Implemented a global UTC utility for consistent, timezone-aware timestamp formatting across all parsers.

• Enhanced Accuracy: Improved the handling of complex time structures, specifically FILETIME and ObjectID timestamps.
• Uniform Application: The new time logic has been applied uniformly across all artifact collectors, ensuring perfect sync when correlating events.

Extended Timeline Visualization:

• Expanded Support: Timeline capabilities have been extended to accommodate a wider variety of new artifacts.
• Under The Hood: Added new robust utility modules (timeline utils/value_parser.js, dataUtils.js).
• UI Upgrades: Updated React components and formatters to support the new data streams and provide a smoother investigative experience.

A Special Thank You & Looking Ahead

Before wrapping up these release notes, I want to take a moment to express my deep gratitude to Mr. Scott Simpson.

I recently received a donation from Mr. Scott Simpson, and while every bit of support helps keep this independent project alive, it was the incredibly kind message he attached that truly made my day. His words gave me a massive boost of motivation and reminded me exactly why I built Crow-Eye: to seek the truth and keep professional-grade forensics accessible to everyone, especially students and enthusiasts. Mr. Scott, thank you so much your encouragement means the world to me!

Inspired by his focus on helping students and enthusiasts, I also want to share a sneak peek into the future: I am currently working on something entirely new that will be integrated directly into Crow-Eye. This upcoming addition is specifically designed to help the next generation of investigators deeply understand the complex internal structures of forensic artifacts. Stay tuned!

Full Changelog: v0.9.0...v0.9.1

---

This discussion was created from the release v0.9.1.