Hindsight: vanhemmat versiot ja versiohistoria

hindsight-2026 06-header
Read more on the new features at https://dfir.blog/hindsight-parses-firefox/
Huge thanks to Steven R. Schiavone of the Westchester County District Attorney's Office for contributing Firefox support to Hindsight!
What's Changed
🚀 Features
- Add Mozilla Firefox support by @BitEU in #272
- Add parsing of Service Worker-related data by @RyanDFIR in #271
- Enhance extension handling: merge data from disk and Secure Preferenc… by @RyanDFIR in #273
- Expand downloads parsing by @RyanDFIR in #274
- Add support for parsing and summarizing Chrome Declarative Net Reques… by @RyanDFIR in #283
🛠️ Minor Changes & Fixes
- Implement browser auto-detection and improve profile processing logic… by @RyanDFIR in #275
- Refactor browser processing logic to use unified ProcessingDisplay … by @RyanDFIR in #276
- Add support for detecting and processing browser variants (Edge, Brav… by @RyanDFIR in #278
- Fix a few loose regexes by @RyanDFIR in #281
- Make source paths relative to profile when possible in XLSX rendering… by @RyanDFIR in #282
- Improve path normalization and key splitting logic in Chrome artifact… by @RyanDFIR in #284
- Update release process by @RyanDFIR in #285
- Add detailed permissions/scripts for extensions and add download headers by @RyanDFIR in #289
Other Changes
- Bump postcss from 8.5.3 to 8.5.13 by @dependabot[bot] in #269
- Add CodeQL workflow and custom configuration to exclude false-positiv… by @RyanDFIR in #279
- Update CodeQL workflow to include custom config for excluding false-p… by @RyanDFIR in #280
- Bump esbuild and vite by @dependabot[bot] in #277
- Bump version to 2026.06 by @RyanDFIR in #286
- Assorted small fixes by @RyanDFIR in #287
- Pin macOS build runners and update GitHub Actions dependencies by @RyanDFIR in #288
New Contributors
- @BitEU made their first contribution in #272
Full Changelog: v2026.04...v2026.06

hindsight-2026 04-header
Read more on the new features at https://dfir.blog/hindsight-parses-sessions-and-notifications/
What's Changed
🚀 Features
- Add support for Knowledge Graph entity resolution and categories by @RyanDFIR in #255
- Add parsing of platform notifications (using ccl_chromium_reader). Ad… by @RyanDFIR in #259
- Add Chrome session analysis, session reconstruction, and XLSX enhancements by @RyanDFIR in #264
🛠️ Minor Changes & Fixes
- Fix a bug in OPFS processing logic that would only show either t or… by @RyanDFIR in #246
- Add parsing of additional Chrome cookie fields (top_frame_site_key … by @RyanDFIR in #247
- Add support for parsing opener_visit field in Chrome history data a… by @RyanDFIR in #248
- Add (experimental) support for new cache types (DawnCache, DawnWebGPUCache, DawnGraphiteCache) by @RyanDFIR in #251
- Update some row types and XLSX coloring to better reflect their function by @RyanDFIR in #253
- Enhance Chrome IndexedDB processing for Blobs by @RyanDFIR in #258
- Refactor SQLite query execution to use a reusable context manager, im… by @RyanDFIR in #265
- Add an explicit "Source Item" column showing where the row was sourced from. by @RyanDFIR in #267
- Small formatting updates to XLSX output (Sessions tab and page headers) by @RyanDFIR in #268
Other Changes
- Add Unicode support check for banner and fallback for non-Unicode con… by @RyanDFIR in #252
- Up max version to 145; slight color tweaking. by @RyanDFIR in #254
- Potential fix for code scanning alert no. 1: Workflow does not contain permissions by @RyanDFIR in #256
- Bump rollup from 4.35.0 to 4.59.0 by @dependabot[bot] in #257
- Bump vite from 6.4.1 to 6.4.2 by @dependabot[bot] in #262
- Bump picomatch from 4.0.3 to 4.0.4 by @dependabot[bot] in #261
- Replace pytz with zoneinfo for timezone handling and update depen… by @RyanDFIR in #266
Full Changelog: v2026.01...v2026.04

image
What's Changed
🚀 Features
- Add parsing of Sync Data by @obsidianforensics in #234
- Add support for originator GUIDs and simplify Sync Data labels by @obsidianforensics in #237
- Add parsing of permission_actions from Preferences file, and misc s… by @obsidianforensics in #227
- Introduce rich library for improved UI/UX and refactor artifact pro… by @obsidianforensics in #241
🛠️ Minor Changes & Fixes
- Fix outdated plugin blog post links by @juliapaluch in #218
- Fix crash when encountering unexpected extension version strings. by @obsidianforensics in #226
- Add updated parsing for changes to DIPS in v142. by @obsidianforensics in #229
- Make creating the logical paths for the File System more tolerant of … by @obsidianforensics in #231
- Add translation of accountcapabilities to human-readable from Preferences. by @obsidianforensics in #232
- Improve JSONL output. Added parsing for Chrome IndexedDB, Extension Storage, Sync Data, and Installed Extensions record types. by @obsidianforensics in #238
- Prevent errors by adding directory existence checks and improve file … by @obsidianforensics in #242
- Add some new danger_type and interrupt_reason codes, and reformat for… by @obsidianforensics in #224
- Add generic parsing for simple preference timestamp values. by @obsidianforensics in #228
- Address ResourceWarnings by adding more robust file-closing and suppre… by @obsidianforensics in #235
- Remove the Brave option for now; (old) parsing code remains. More wor… by @obsidianforensics in #236
- Improve SQLite output, making it comparable to the XLSX and JSONL out… by @obsidianforensics in #239
- Add support for "Login Data For Account" database parsing in Chrome a… by @obsidianforensics in #243
New Contributors
- @juliapaluch made their first contribution in #218
Full Changelog: v2025.03...v2026.01

What's Changed
🚀 Features
- Add parsing of multiple databases related to Extensions by @obsidianforensics in #205
- Added a new output tab/table called Extension Data to display it
🛠️ Minor Changes & Fixes
- Add Extension permissions and manifest to output. Refactor Extension parsing to be more concise by @obsidianforensics in #208
- Add try/except around Cache parsing to keep Hindsight from completely… by @obsidianforensics in #203
Other Changes
- Update setup.py for new PyPI release by @obsidianforensics in #195
- Regexp fix Update hindsight_gui.py by @demireng in #197
- Update SQLite output to have Extension Data by @obsidianforensics in #210
- 2025.03 release by @obsidianforensics in #211
New Contributors
- @demireng made their first contribution in #197
Full Changelog: v2024.10...v2025.03

What's Changed
🚀 Features
- Add parsing of DIPS (Detect Incidental Party State) database by @obsidianforensics in #146
- Add parsing of IndexedDB records. Update included ccl_chrome_indexedd… by @obsidianforensics in #173
- Switch cache parsing code to use ccl_chromium_reader by @obsidianforensics in #182
🛠️ Minor Changes & Fixes
- Add executing a test query when opening databases to catch corrupt da… by @obsidianforensics in #153
- Upgrade protobuf>=4.23 in requirements.txt and regenerate site_data_p… by @obsidianforensics in #154
- In a URLItem, replace the url_id property with visit_id. Update outpu… by @obsidianforensics in #157
- Add try/except around urllib parsing. Modify the HSTS domain parsing … by @obsidianforensics in #163
- Update determine_version() to account for recent Chrome versions (up … by @obsidianforensics in #166
- Catch exception on edge case where downloads table is not present by @obsidianforensics in #167
- Add more exception handling to address issues raised in #169 by @obsidianforensics in #170
- Update DIPS parsing with new columns and popups table by @obsidianforensics in #171
- Fix sorting error when an item is missing tzinfo (and add warning) by @obsidianforensics in #172
- Fix TypeError by @ryneeverett in #174
- sqlite-view: 0.1.8 -> 0.2.0 by @ryneeverett in #175
- Correct inconsistent use of quotation marks in metadata attribute access in webbrowser.py by @notwhickey in #183
- Swap bundled ccl_chromium_indexeddb for newer version pulled from GitHub by @obsidianforensics in #184
- Clean up utils.py (replace deprecated utcfromtimestamp function, fi… by @obsidianforensics in #185
- Switch to ccl_chromium_reader from bundled ccl_* code for session sto… by @obsidianforensics in #186
- Up the max Chrome version to 129. Add get_clean_hostnames function … by @obsidianforensics in #187
- Switch to using origin_url column instead of action_url. Update t… by @obsidianforensics in #190
- Updates for v2024.10 by @obsidianforensics in #191
Other Changes
- Update social logos and contact info by @obsidianforensics in #164
- Adding Windows 11 default path and generic way to find profile under inputs_selector by @Jlcasado in #179
New Contributors
- @Jlcasado made their first contribution in #179
- @notwhickey made their first contribution in #183
Full Changelog: v2023.03...v2024.10