| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-02-23 | [KernelCache] Automatically unwrap kernel caches within a full IMG4 container | Mark Rowe | |
| This builds on the existing support for opening kernel caches directly from IM4P payload files, and allows opening macOS kernel caches directly from `/System/Volumes/Preboot/<apfs-uuid>/boot/<boot-manifest-hash>/System/Library/Caches/com.apple.kernelcaches/kernelcache`. | |||
| 2026-01-30 | Improve filename handling for container files. | Brian Potchik | |
| 2025-10-18 | Add DecodeWithContext to LZFSETransform. | Brian Potchik | |
| 2025-10-10 | Add password prompting for encrypted containers in Container Browser. | Brian Potchik | |
| 2025-10-03 | Add zero-copy data pointer access for BinaryData objects for API-side ↵ | Brian Potchik | |
| container transforms. | |||
| 2025-10-03 | Update IMG4 transform to use DecodeWithContext and synthesize a filename for ↵ | Brian Potchik | |
| the payload. | |||
| 2025-10-01 | Cleanup for some container format handling. | Brian Potchik | |
| 2025-09-30 | Initial support for opening container formats. | Brian Potchik | |
| 2025-08-20 | Fix memory leak in LZFSE transform along with some other fixes. | Brian Potchik | |
| 2025-07-16 | Mach-O/KernelCache warning cleanup | kat | |
| 2025-03-19 | Add iOS/macOS MH_FILESET KernelCache View and loader. | kat | |
| This loader is inspired by/based on our dyld_shared_cache loader, following the same design language. It targets primarily the latest kernels, but should support any with the MH_FILESET format. It allows you to decide which images you would like to map in (the kernel itself included), resulting in targeted analysis when you may only need to load a singular image. It also supports dropping in compressed KernelCaches, directly from the ipsw. This is an early solution and we have many more changes and improvements planned. We look forward to your feedback | |||
