Telegram channels support for Android databases (#2134)

sepinf-inc / IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.

Other

884 stars 209 forks source link

Telegram channels support for Android databases (#2134) #2138

Closed wladimirleite closed 3 months ago

wladimirleite commented 3 months ago

Closes #2134.

lfcnassif commented 3 months ago

Thanks @wladimirleite!

lfcnassif commented 3 months ago

I'm waiting for a regression test on 150 Telegram DBs to finish, so we can merge this.

lfcnassif commented 3 months ago

Master extracted ~2.4K more messages (from ~2.3M), but from iOS DBs, not from Android DBs. I had a "disk full" issue while processing and resumed it, so possibly that difference is related to resuming. I'll run again the failed processing with master to make sure everything is fine, looking at the code seems iOS processing wasn't changed.

wladimirleite commented 3 months ago

There were some changes in the common part of the code, also used when parsing Telegram iOS databases, but in theory it shouldn't affect the number of messages. Obviously it possible that some regression was introduced. Let me know about the results when the tests finish.