hindsight-2026 04-header
Read more on the new features at https://dfir.blog/hindsight-parses-sessions-and-notifications/
What's Changed
🚀 Features
- Add support for Knowledge Graph entity resolution and categories by @RyanDFIR in #255
- Add parsing of platform notifications (using ccl_chromium_reader). Ad… by @RyanDFIR in #259
- Add Chrome session analysis, session reconstruction, and XLSX enhancements by @RyanDFIR in #264
🛠️ Minor Changes & Fixes
- Fix a bug in OPFS processing logic that would only show either t or… by @RyanDFIR in #246
- Add parsing of additional Chrome cookie fields (top_frame_site_key … by @RyanDFIR in #247
- Add support for parsing opener_visit field in Chrome history data a… by @RyanDFIR in #248
- Add (experimental) support for new cache types (DawnCache, DawnWebGPUCache, DawnGraphiteCache) by @RyanDFIR in #251
- Update some row types and XLSX coloring to better reflect their function by @RyanDFIR in #253
- Enhance Chrome IndexedDB processing for Blobs by @RyanDFIR in #258
- Refactor SQLite query execution to use a reusable context manager, im… by @RyanDFIR in #265
- Add an explicit "Source Item" column showing where the row was sourced from. by @RyanDFIR in #267
- Small formatting updates to XLSX output (Sessions tab and page headers) by @RyanDFIR in #268
Other Changes
- Add Unicode support check for banner and fallback for non-Unicode con… by @RyanDFIR in #252
- Up max version to 145; slight color tweaking. by @RyanDFIR in #254
- Potential fix for code scanning alert no. 1: Workflow does not contain permissions by @RyanDFIR in #256
- Bump rollup from 4.35.0 to 4.59.0 by @dependabot[bot] in #257
- Bump vite from 6.4.1 to 6.4.2 by @dependabot[bot] in #262
- Bump picomatch from 4.0.3 to 4.0.4 by @dependabot[bot] in #261
- Replace pytz with zoneinfo for timezone handling and update depen… by @RyanDFIR in #266
Full Changelog: v2026.01...v2026.04
