diff --git a/Cargo.lock b/Cargo.lock index 991cfb1..adcecf3 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1988,7 +1988,7 @@ checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98" [[package]] name = "memf-carve" -version = "0.1.5" +version = "0.1.6" dependencies = [ "forensic-carve", "memf-core", @@ -1999,7 +1999,7 @@ dependencies = [ [[package]] name = "memf-core" -version = "0.2.6" +version = "0.2.7" dependencies = [ "bytemuck", "lru", @@ -2018,7 +2018,7 @@ dependencies = [ [[package]] name = "memf-correlate" -version = "0.3.1" +version = "0.3.2" dependencies = [ "chrono", "forensicnomicon", @@ -2029,7 +2029,7 @@ dependencies = [ [[package]] name = "memf-format" -version = "0.3.2" +version = "0.3.3" dependencies = [ "flate2", "goblin", @@ -2044,7 +2044,7 @@ dependencies = [ [[package]] name = "memf-linux" -version = "0.3.3" +version = "0.3.4" dependencies = [ "forensicnomicon", "goblin", @@ -2060,7 +2060,7 @@ dependencies = [ [[package]] name = "memf-session" -version = "0.3.3" +version = "0.3.4" dependencies = [ "anyhow", "memf-format", @@ -2070,7 +2070,7 @@ dependencies = [ [[package]] name = "memf-strings" -version = "0.2.3" +version = "0.2.4" dependencies = [ "aho-corasick", "inventory", @@ -2082,7 +2082,7 @@ dependencies = [ [[package]] name = "memf-symbols" -version = "0.2.4" +version = "0.2.5" dependencies = [ "goblin", "memf-format", @@ -2096,7 +2096,7 @@ dependencies = [ [[package]] name = "memf-windows" -version = "0.5.0" +version = "0.5.1" dependencies = [ "aes 0.8.4", "aes-gcm", diff --git a/Cargo.toml b/Cargo.toml index 6ae7d33..cce5128 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -34,15 +34,15 @@ shellitem = "0.2" # its in-memory prefetch carve to this fleet crate. prefetch-core = "0.1" # Internal (version + path: path drives local dev, version is used on publish). -memf-format = { version = "0.3.2", path = "crates/memf-format" } -memf-strings = { version = "0.2.3", path = "crates/memf-strings" } -memf-symbols = { version = "0.2.4", path = "crates/memf-symbols" } -memf-core = { version = "0.2.6", path = "crates/memf-core" } -memf-linux = { version = "0.3.3", path = "crates/memf-linux" } -memf-session = { version = "0.3.3", path = "crates/memf-session" } -memf-windows = { version = "0.5.0", path = "crates/memf-windows" } -memf-correlate = { version = "0.3.1", path = "crates/memf-correlate" } -memf-carve = { version = "0.1.5", path = "crates/memf-carve" } +memf-format = { version = "0.3.3", path = "crates/memf-format" } +memf-strings = { version = "0.2.4", path = "crates/memf-strings" } +memf-symbols = { version = "0.2.5", path = "crates/memf-symbols" } +memf-core = { version = "0.2.7", path = "crates/memf-core" } +memf-linux = { version = "0.3.4", path = "crates/memf-linux" } +memf-session = { version = "0.3.4", path = "crates/memf-session" } +memf-windows = { version = "0.5.1", path = "crates/memf-windows" } +memf-correlate = { version = "0.3.2", path = "crates/memf-correlate" } +memf-carve = { version = "0.1.6", path = "crates/memf-carve" } # Fleet carving contract + single-pass sweep engine. forensic-carve = "0.1" assert_cmd = "2" diff --git a/crates/memf-carve/CHANGELOG.md b/crates/memf-carve/CHANGELOG.md index 792b3a2..4c6ddfe 100644 --- a/crates/memf-carve/CHANGELOG.md +++ b/crates/memf-carve/CHANGELOG.md @@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [0.1.6](https://github.com/SecurityRonin/memory-forensic/compare/memf-carve-v0.1.5...memf-carve-v0.1.6) - 2026-11-04 + +### Fixed + +- *(msrv)* raise the memf-* floors to 1.89 (1.95 where yara-x reaches) + ## [0.1.4](https://github.com/SecurityRonin/memory-forensic/compare/memf-carve-v0.1.3...memf-carve-v0.1.4) - 2026-08-08 ### Fixed diff --git a/crates/memf-carve/Cargo.toml b/crates/memf-carve/Cargo.toml index 0d42a80..36d2e58 100644 --- a/crates/memf-carve/Cargo.toml +++ b/crates/memf-carve/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "memf-carve" -version = "0.1.5" +version = "0.1.6" description = "Plane-V memory artifact carving: per-process virtual-address-space carving over the forensic-carve sweep engine (memory medium of the fleet carving contract)" edition.workspace = true # 1.95, not the workspace 1.89: memf-carve depends on memf-windows, whose yara-x diff --git a/crates/memf-core/Cargo.toml b/crates/memf-core/Cargo.toml index ff82f42..2850294 100644 --- a/crates/memf-core/Cargo.toml +++ b/crates/memf-core/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "memf-core" -version = "0.2.6" +version = "0.2.7" description = "Virtual address translation and kernel object reading for memory forensics" edition.workspace = true rust-version.workspace = true diff --git a/crates/memf-correlate/CHANGELOG.md b/crates/memf-correlate/CHANGELOG.md index e2d1932..4990617 100644 --- a/crates/memf-correlate/CHANGELOG.md +++ b/crates/memf-correlate/CHANGELOG.md @@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [0.3.2](https://github.com/SecurityRonin/memory-forensic/compare/memf-correlate-v0.3.1...memf-correlate-v0.3.2) - 2026-11-04 + +### Fixed + +- *(msrv)* raise the memf-* floors to 1.89 (1.95 where yara-x reaches) + ## [0.3.1](https://github.com/SecurityRonin/memory-forensic/compare/memf-correlate-v0.3.0...memf-correlate-v0.3.1) - 2026-08-08 ### Fixed diff --git a/crates/memf-correlate/Cargo.toml b/crates/memf-correlate/Cargo.toml index c9def52..4206f88 100644 --- a/crates/memf-correlate/Cargo.toml +++ b/crates/memf-correlate/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "memf-correlate" -version = "0.3.1" +version = "0.3.2" description = "Forensic event correlation model for the memf forensics framework" edition.workspace = true rust-version = "1.89" diff --git a/crates/memf-format/CHANGELOG.md b/crates/memf-format/CHANGELOG.md index f3ce4c5..2e58153 100644 --- a/crates/memf-format/CHANGELOG.md +++ b/crates/memf-format/CHANGELOG.md @@ -3,6 +3,12 @@ All notable changes to `memf-format` are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versions follow SemVer. +## [0.3.3](https://github.com/SecurityRonin/memory-forensic/compare/memf-format-v0.3.2...memf-format-v0.3.3) - 2026-11-04 + +### Fixed + +- *(security)* state ruzstd >= 0.9.1 in memf-format's own manifest + ## [0.3.1](https://github.com/SecurityRonin/memory-forensic/compare/memf-format-v0.3.0...memf-format-v0.3.1) - 2026-08-08 ### Fixed diff --git a/crates/memf-format/Cargo.toml b/crates/memf-format/Cargo.toml index b15a109..dc21d36 100644 --- a/crates/memf-format/Cargo.toml +++ b/crates/memf-format/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "memf-format" -version = "0.3.2" +version = "0.3.3" description = "Physical memory dump format parsers for the memf forensics framework" edition.workspace = true rust-version.workspace = true diff --git a/crates/memf-linux/Cargo.toml b/crates/memf-linux/Cargo.toml index d70ae62..8efcd7a 100644 --- a/crates/memf-linux/Cargo.toml +++ b/crates/memf-linux/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "memf-linux" -version = "0.3.3" +version = "0.3.4" description = "Linux kernel memory forensic walkers (processes, connections, modules)" edition.workspace = true rust-version.workspace = true diff --git a/crates/memf-session/Cargo.toml b/crates/memf-session/Cargo.toml index b8ffa44..3f53d3e 100644 --- a/crates/memf-session/Cargo.toml +++ b/crates/memf-session/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "memf-session" -version = "0.3.3" +version = "0.3.4" description = "Memory-dump analysis bootstrap: OS detection, CR3/DTB recovery, and kernel list-head resolution from a physical memory provider" edition.workspace = true rust-version.workspace = true diff --git a/crates/memf-strings/CHANGELOG.md b/crates/memf-strings/CHANGELOG.md index 32d83f6..6bcebbe 100644 --- a/crates/memf-strings/CHANGELOG.md +++ b/crates/memf-strings/CHANGELOG.md @@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [0.2.4](https://github.com/SecurityRonin/memory-forensic/compare/memf-strings-v0.2.3...memf-strings-v0.2.4) - 2026-11-04 + +### Fixed + +- *(security)* move to yara-x 1.22 and ruzstd 0.9.1 + ## [0.2.2](https://github.com/SecurityRonin/memory-forensic/compare/memf-strings-v0.2.1...memf-strings-v0.2.2) - 2026-08-08 ### Fixed diff --git a/crates/memf-strings/Cargo.toml b/crates/memf-strings/Cargo.toml index 0339d52..97aa177 100644 --- a/crates/memf-strings/Cargo.toml +++ b/crates/memf-strings/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "memf-strings" -version = "0.2.3" +version = "0.2.4" description = "String extraction, classification, and YARA-X scanning for memory forensics" edition.workspace = true rust-version = "1.95" diff --git a/crates/memf-symbols/Cargo.toml b/crates/memf-symbols/Cargo.toml index c666818..ceb1ab4 100644 --- a/crates/memf-symbols/Cargo.toml +++ b/crates/memf-symbols/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "memf-symbols" -version = "0.2.4" +version = "0.2.5" description = "Symbol resolution backends for memory forensics (ISF JSON, BTF)" edition.workspace = true rust-version.workspace = true diff --git a/crates/memf-windows/CHANGELOG.md b/crates/memf-windows/CHANGELOG.md index 80b2c8d..70def44 100644 --- a/crates/memf-windows/CHANGELOG.md +++ b/crates/memf-windows/CHANGELOG.md @@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [0.5.1](https://github.com/SecurityRonin/memory-forensic/compare/memf-windows-v0.5.0...memf-windows-v0.5.1) - 2026-11-04 + +### Fixed + +- *(security)* move to yara-x 1.22 and ruzstd 0.9.1 + ## [0.4.4](https://github.com/SecurityRonin/memory-forensic/compare/memf-windows-v0.4.3...memf-windows-v0.4.4) - 2026-08-08 ### Documentation diff --git a/crates/memf-windows/Cargo.toml b/crates/memf-windows/Cargo.toml index cae50b2..6b0feb4 100644 --- a/crates/memf-windows/Cargo.toml +++ b/crates/memf-windows/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "memf-windows" -version = "0.5.0" +version = "0.5.1" description = "Windows kernel memory forensic walkers (processes, threads, drivers, DLLs)" edition.workspace = true rust-version = "1.95"