Cerbero Suite 8.4

We’re happy to announce the release of Cerbero Suite 8.4 and Cerbero Engine 5.4. This might be a minor version, but we’ve added some important features that have been on our list for a while.

Table Sorting

This has been a long time coming—most tables in Cerbero Suite can now be sorted. If a plugin uses the default table control, sorting works automatically without any extra effort.

Continue reading “Cerbero Suite 8.4”

WIM Format Package

We’re excited to announce the release of the WIM Format package, which adds support for the Windows Imaging (WIM) file format.

Once installed, you can explore the contents of WIM images directly in Cerbero Suite. This includes browsing the file hierarchy, inspecting individual files, and performing in-depth forensic analysis.

Additionally, when used in conjunction with the ISO Format package, it’s possible to seamlessly access WIM images embedded within ISO files—making the analysis of Windows installation media even more efficient.

Disk Format Package

We’re excited to announce the release of our Disk Format package, which adds support for parsing and analyzing disk layouts including MBR and GPT partition tables.

If a partition contains a supported file system, it will be automatically added as a child object. The package also enables exploration of the MBR boot code using the Carbon disassembler.

Prototype Memory & Services

We are excited to announce the release of version 0.3 of our Memory Analysis package, currently in beta. This update introduces two major features: support for prototype Page Table Entries (PTEs) and the ability to enumerate and display Windows services from memory captures.

Continue reading “Prototype Memory & Services”