.gitignore
.python-version
.readthedocs.yaml
.safety-policy.yml
CONTRIBUTING.md
Dockerfile
Dockerfile.android
Dockerfile.ios
LICENSE
Makefile
README.md
SECURITY.md
mkdocs.yml
pyproject.toml
uv.lock
.github/dependabot.yml
.github/workflows/add-issue-to-project.yml
.github/workflows/mypy.yml
.github/workflows/publish-release-docker.yml
.github/workflows/release.yml
.github/workflows/ruff.yml
.github/workflows/tests.yml
.github/workflows/update-ios-data.yml
.github/workflows/scripts/update-ios-releases.py
docs/command_completion.md
docs/docker.md
docs/index.md
docs/install.md
docs/introduction.md
docs/iocs.md
docs/license.md
docs/mvt.png
docs/android/adb.md
docs/android/backup.md
docs/android/intrusion_logs.md
docs/android/methodology.md
docs/development/custom_commands.md
docs/development/index.md
docs/development/plugin_configuration.md
docs/development/plugins.md
docs/img/macos-backup.jpg
docs/img/macos-backup2.png
docs/img/macos-backups.png
docs/ios/install.md
docs/ios/methodology.md
docs/ios/records.md
docs/ios/sysdiagnose.md
docs/ios/backup/check.md
docs/ios/backup/itunes.md
docs/ios/backup/libimobiledevice.md
docs/ios/filesystem/check.md
docs/ios/filesystem/dump.md
src/mvt/__init__.py
src/mvt/cli.py
src/mvt/plugin.py
src/mvt.egg-info/PKG-INFO
src/mvt.egg-info/SOURCES.txt
src/mvt.egg-info/dependency_links.txt
src/mvt.egg-info/entry_points.txt
src/mvt.egg-info/requires.txt
src/mvt.egg-info/scm_file_list.json
src/mvt.egg-info/scm_version.json
src/mvt.egg-info/top_level.txt
src/mvt/android/__init__.py
src/mvt/android/cli.py
src/mvt/android/cmd_check_androidqf.py
src/mvt/android/cmd_check_backup.py
src/mvt/android/cmd_check_bugreport.py
src/mvt/android/cmd_check_intrusion_logs.py
src/mvt/android/command_modules.py
src/mvt/android/utils.py
src/mvt/android/artifacts/__init__.py
src/mvt/android/artifacts/artifact.py
src/mvt/android/artifacts/dumpsys_accessibility.py
src/mvt/android/artifacts/dumpsys_adb.py
src/mvt/android/artifacts/dumpsys_appops.py
src/mvt/android/artifacts/dumpsys_battery_daily.py
src/mvt/android/artifacts/dumpsys_battery_history.py
src/mvt/android/artifacts/dumpsys_dbinfo.py
src/mvt/android/artifacts/dumpsys_package_activities.py
src/mvt/android/artifacts/dumpsys_packages.py
src/mvt/android/artifacts/dumpsys_platform_compat.py
src/mvt/android/artifacts/dumpsys_receivers.py
src/mvt/android/artifacts/file_timestamps.py
src/mvt/android/artifacts/getprop.py
src/mvt/android/artifacts/mounts.py
src/mvt/android/artifacts/package_resolvers.py
src/mvt/android/artifacts/processes.py
src/mvt/android/artifacts/settings.py
src/mvt/android/artifacts/tombstone_crashes.py
src/mvt/android/modules/__init__.py
src/mvt/android/modules/androidqf/__init__.py
src/mvt/android/modules/androidqf/aqf_files.py
src/mvt/android/modules/androidqf/aqf_getprop.py
src/mvt/android/modules/androidqf/aqf_log_timestamps.py
src/mvt/android/modules/androidqf/aqf_packages.py
src/mvt/android/modules/androidqf/aqf_processes.py
src/mvt/android/modules/androidqf/aqf_settings.py
src/mvt/android/modules/androidqf/base.py
src/mvt/android/modules/androidqf/mounts.py
src/mvt/android/modules/androidqf/root_binaries.py
src/mvt/android/modules/backup/__init__.py
src/mvt/android/modules/backup/base.py
src/mvt/android/modules/backup/helpers.py
src/mvt/android/modules/backup/sms.py
src/mvt/android/modules/bugreport/__init__.py
src/mvt/android/modules/bugreport/base.py
src/mvt/android/modules/bugreport/dumpsys_accessibility.py
src/mvt/android/modules/bugreport/dumpsys_activities.py
src/mvt/android/modules/bugreport/dumpsys_adb_state.py
src/mvt/android/modules/bugreport/dumpsys_appops.py
src/mvt/android/modules/bugreport/dumpsys_battery_daily.py
src/mvt/android/modules/bugreport/dumpsys_battery_history.py
src/mvt/android/modules/bugreport/dumpsys_dbinfo.py
src/mvt/android/modules/bugreport/dumpsys_getprop.py
src/mvt/android/modules/bugreport/dumpsys_packages.py
src/mvt/android/modules/bugreport/dumpsys_platform_compat.py
src/mvt/android/modules/bugreport/dumpsys_receivers.py
src/mvt/android/modules/bugreport/fs_timestamps.py
src/mvt/android/modules/bugreport/mounts.py
src/mvt/android/modules/bugreport/processes.py
src/mvt/android/modules/bugreport/settings.py
src/mvt/android/modules/bugreport/tombstones.py
src/mvt/android/modules/intrusion_logs/__init__.py
src/mvt/android/modules/intrusion_logs/base.py
src/mvt/android/modules/intrusion_logs/connect_event.py
src/mvt/android/modules/intrusion_logs/dns_event.py
src/mvt/android/modules/intrusion_logs/security_event.py
src/mvt/android/parsers/__init__.py
src/mvt/android/parsers/backup.py
src/mvt/android/parsers/proto/__init__.py
src/mvt/android/parsers/proto/tombstone.proto
src/mvt/android/parsers/proto/tombstone.py
src/mvt/common/__init__.py
src/mvt/common/alerts.py
src/mvt/common/artifact.py
src/mvt/common/cli_plugins.py
src/mvt/common/cmd_check_iocs.py
src/mvt/common/cmd_plugins.py
src/mvt/common/command.py
src/mvt/common/completion.py
src/mvt/common/config.py
src/mvt/common/help.py
src/mvt/common/indicators.py
src/mvt/common/log.py
src/mvt/common/logo.py
src/mvt/common/module.py
src/mvt/common/module_loader.py
src/mvt/common/module_types.py
src/mvt/common/options.py
src/mvt/common/password.py
src/mvt/common/plugin_config.py
src/mvt/common/updates.py
src/mvt/common/url.py
src/mvt/common/utils.py
src/mvt/common/version.py
src/mvt/common/virustotal.py
src/mvt/ios/__init__.py
src/mvt/ios/cli.py
src/mvt/ios/cmd_check_backup.py
src/mvt/ios/cmd_check_fs.py
src/mvt/ios/cmd_check_sysdiagnose.py
src/mvt/ios/command_modules.py
src/mvt/ios/decrypt.py
src/mvt/ios/decrypt_config.py
src/mvt/ios/versions.py
src/mvt/ios/data/ios_models.json
src/mvt/ios/data/ios_versions.json
src/mvt/ios/modules/__init__.py
src/mvt/ios/modules/base.py
src/mvt/ios/modules/net_base.py
src/mvt/ios/modules/backup/__init__.py
src/mvt/ios/modules/backup/backup_info.py
src/mvt/ios/modules/backup/configuration_profiles.py
src/mvt/ios/modules/backup/manifest.py
src/mvt/ios/modules/backup/profile_events.py
src/mvt/ios/modules/fs/__init__.py
src/mvt/ios/modules/fs/analytics.py
src/mvt/ios/modules/fs/analytics_ios_versions.py
src/mvt/ios/modules/fs/cache_files.py
src/mvt/ios/modules/fs/filesystem.py
src/mvt/ios/modules/fs/net_netusage.py
src/mvt/ios/modules/fs/safari_favicon.py
src/mvt/ios/modules/fs/shutdownlog.py
src/mvt/ios/modules/fs/version_history.py
src/mvt/ios/modules/fs/webkit_base.py
src/mvt/ios/modules/fs/webkit_indexeddb.py
src/mvt/ios/modules/fs/webkit_localstorage.py
src/mvt/ios/modules/fs/webkit_safariviewservice.py
src/mvt/ios/modules/mixed/__init__.py
src/mvt/ios/modules/mixed/applications.py
src/mvt/ios/modules/mixed/calendar.py
src/mvt/ios/modules/mixed/calls.py
src/mvt/ios/modules/mixed/chrome_favicon.py
src/mvt/ios/modules/mixed/chrome_history.py
src/mvt/ios/modules/mixed/contacts.py
src/mvt/ios/modules/mixed/firefox_favicon.py
src/mvt/ios/modules/mixed/firefox_history.py
src/mvt/ios/modules/mixed/global_preferences.py
src/mvt/ios/modules/mixed/idstatuscache.py
src/mvt/ios/modules/mixed/interactionc.py
src/mvt/ios/modules/mixed/locationd.py
src/mvt/ios/modules/mixed/net_datausage.py
src/mvt/ios/modules/mixed/osanalytics_addaily.py
src/mvt/ios/modules/mixed/safari_browserstate.py
src/mvt/ios/modules/mixed/safari_history.py
src/mvt/ios/modules/mixed/shortcuts.py
src/mvt/ios/modules/mixed/sms.py
src/mvt/ios/modules/mixed/sms_attachments.py
src/mvt/ios/modules/mixed/tcc.py
src/mvt/ios/modules/mixed/webkit_resource_load_statistics.py
src/mvt/ios/modules/mixed/webkit_session_resource_log.py
src/mvt/ios/modules/mixed/whatsapp.py
src/mvt/ios/modules/mixed/whatsapp_contacts.py
src/mvt/ios/modules/sysdiagnose/__init__.py
src/mvt/ios/modules/sysdiagnose/base.py
src/mvt/ios/modules/sysdiagnose/sysdiagnose_info.py
tests/__init__.py
tests/conftest.py
tests/plugin_fixtures.py
tests/test_check_android_adb_removed.py
tests/test_check_android_androidqf.py
tests/test_check_android_backup.py
tests/test_check_android_bugreport.py
tests/test_check_ios_backup.py
tests/test_check_ios_sysdiagnose.py
tests/test_cli.py
tests/test_cli_entry_points.py
tests/test_cli_startup.py
tests/test_cli_verbose.py
tests/test_cmd_check_sysdiagnose.py
tests/test_completion.py
tests/test_custom_modules.py
tests/test_ios_versions.py
tests/utils.py
tests/android/__init__.py
tests/android/test_artifact.py
tests/android/test_artifact_dumpsys_accessibility.py
tests/android/test_artifact_dumpsys_adb.py
tests/android/test_artifact_dumpsys_appops.py
tests/android/test_artifact_dumpsys_battery_daily.py
tests/android/test_artifact_dumpsys_battery_history.py
tests/android/test_artifact_dumpsys_dbinfo.py
tests/android/test_artifact_dumpsys_package_activities.py
tests/android/test_artifact_dumpsys_packages.py
tests/android/test_artifact_dumpsys_platform_compat.py
tests/android/test_artifact_dumpsys_receivers.py
tests/android/test_artifact_getprop.py
tests/android/test_artifact_processes.py
tests/android/test_artifact_settings.py
tests/android/test_artifact_tombstone_caused_by.py
tests/android/test_artifact_tombstones.py
tests/android/test_backup_module.py
tests/android/test_backup_parser.py
tests/android/test_check_backup_optional_failure.py
tests/android/test_intrusion_logs.py
tests/android_adb/__init__.py
tests/android_androidqf/__init__.py
tests/android_androidqf/test_files.py
tests/android_androidqf/test_getprop.py
tests/android_androidqf/test_mounts.py
tests/android_androidqf/test_packages.py
tests/android_androidqf/test_processes.py
tests/android_androidqf/test_root_binaries.py
tests/android_androidqf/test_settings.py
tests/android_androidqf/test_tcc.py
tests/android_bugreport/__init__.py
tests/android_bugreport/test_bugreport.py
tests/artifacts/.gitignore
tests/artifacts/androidqf.zip
tests/artifacts/generate_stix.py
tests/artifacts/android_backup/backup.ab
tests/artifacts/android_backup/backup2.ab
tests/artifacts/android_backup/backup3.ab
tests/artifacts/android_backup/apps/com.android.providers.telephony/d_f/000000_sms_backup
tests/artifacts/android_backup/apps/com.android.providers.telephony/d_f/000001_mms_backup
tests/artifacts/android_data/dumpsys_accessibility.txt
tests/artifacts/android_data/dumpsys_accessibility_v14_or_later.txt
tests/artifacts/android_data/dumpsys_adb.txt
tests/artifacts/android_data/dumpsys_adb_wifi.txt
tests/artifacts/android_data/dumpsys_adb_xml.txt
tests/artifacts/android_data/dumpsys_appops.txt
tests/artifacts/android_data/dumpsys_battery.txt
tests/artifacts/android_data/dumpsys_dbinfo.txt
tests/artifacts/android_data/dumpsys_packages.txt
tests/artifacts/android_data/dumpsys_platform_compat.txt
tests/artifacts/android_data/getprop.txt
tests/artifacts/android_data/ps.txt
tests/artifacts/android_data/tombstone_process.pb
tests/artifacts/android_data/tombstone_process.txt
tests/artifacts/android_data/bugreport/dumpstate.txt
tests/artifacts/android_data/bugreport/main_entry.txt
tests/artifacts/android_data/bugreport/FS/data/tombstones/tombstone_00
tests/artifacts/android_data/bugreport/FS/data/tombstones/tombstone_01
tests/artifacts/androidqf/backup.ab
tests/artifacts/androidqf/dumpsys.txt
tests/artifacts/androidqf/files.json
tests/artifacts/androidqf/getprop.txt
tests/artifacts/androidqf/packages.json
tests/artifacts/androidqf/ps.txt
tests/artifacts/androidqf/root_binaries.json
tests/artifacts/androidqf/settings_random.txt
tests/artifacts/androidqf_encrypted/backup.ab
tests/artifacts/ios_backup/Info.plist
tests/artifacts/ios_backup/Manifest.db
tests/artifacts/ios_backup/0d/0d609c54856a9bb2d56729df1d68f2958a88426b
tests/artifacts/ios_backup/0d/0dc926a1810f7aee4e8f38793ed788701f93bf9d
tests/artifacts/ios_backup/1f/1f5a521220a3ad80ebfdc196978df8e7a2e49dee
tests/artifacts/ios_backup/20/2041457d5fe04d39d0ab481178355df6781e6858
tests/artifacts/ios_backup/3a/3a47b0981ed7c10f3e2800aa66bac96a3b5db28e
tests/artifacts/ios_backup/3d/3d0d7e5fb2ce288813306e4d4636395e047a3d28
tests/artifacts/ios_backup/64/64d0019cb3d46bfc8cce545a8ba54b93e7ea9347
tests/artifacts/ios_backup/6e/6e9d0cb750a70e7fa10943c134a5f021dab327e7
tests/artifacts/ios_backup/7c/7c7fba66680ef796b916b067077cc246adacf01d
tests/artifacts/ios_backup/b8/b8548dc30aa1030df0ce18ef08b882cf7ab5212f
tests/artifacts/ios_backup/e7/e794f6ffcc3c222535f47684a63d5178da3c4500
tests/artifacts/stix2/638cd3ee5e5f019f84f9e0ea.json
tests/artifacts/stix2/cytrox.stix2
tests/common/__init__.py
tests/common/test_alerts.py
tests/common/test_cli_plugins.py
tests/common/test_cmd_check_iocs.py
tests/common/test_cmd_plugins.py
tests/common/test_command.py
tests/common/test_command_modules.py
tests/common/test_config.py
tests/common/test_indicators.py
tests/common/test_module_loader.py
tests/common/test_password.py
tests/common/test_plugin.py
tests/common/test_plugin_config.py
tests/common/test_plugin_updates.py
tests/common/test_url.py
tests/common/test_utils.py
tests/ios_backup/__init__.py
tests/ios_backup/test_backup_info.py
tests/ios_backup/test_calendar.py
tests/ios_backup/test_datausage.py
tests/ios_backup/test_decrypt.py
tests/ios_backup/test_global_preferences.py
tests/ios_backup/test_interactionc.py
tests/ios_backup/test_manifest.py
tests/ios_backup/test_safari_browserstate.py
tests/ios_backup/test_safari_history.py
tests/ios_backup/test_sms.py
tests/ios_backup/test_sqlite_handling.py
tests/ios_backup/test_tcc.py
tests/ios_backup/test_webkit_resource_load_statistics.py
tests/ios_backup/test_whatsapp.py
tests/ios_backup/test_whatsapp_contacts.py
tests/ios_fs/__init__.py
tests/ios_fs/test_cache_files.py
tests/ios_fs/test_filesystem.py
tests/ios_fs/test_shutdownlog.py
tests/ios_sysdiagnose/__init__.py
tests/ios_sysdiagnose/test_sysdiagnose_info.py