2026-07-11 11:09:25 "/mnt/live/memory/changes/root/.local/share/Trash/files/crash.9.txt" 2026-07-11 11:09:25 45665 2026-07-11 11:09:17 d18dfbb1bcf87520e59b0813d16e30d9 722 None root root 644 y 2026-07-11 11:08:22 1 1783793302297675
2026-07-11 11:09:27 "/mnt/live/memory/changes/root/.local/share/recently-used.xbel" 2026-07-11 11:09:27 45714 2026-07-11 11:09:27 2fe5299de0e7aa15410ac039f5811398 2910 None root root 600 None None 1 1783793367750900
2026-07-11 11:09:28 "/mnt/live/memory/changes/root/.local/share/recently-used.xbel" 2026-07-11 11:09:28 45715 2026-07-11 11:09:28 f51429d19a79f451cc09e80158b5701e 2789 None root root 600 None None 1 1783793368053929
2026-07-11 11:09:31 "/mnt/live/memory/changes/root/.local/share/recently-used.xbel" 2026-07-11 11:09:31 45716 2026-07-11 11:09:31 d013caee1f1d5d2b87557f5efd0cb423 2789 None root root 600 None None 1 1783793371278135
2026-07-11 11:09:34 "/mnt/live/memory/changes/home/guest/Downloads/.org.chromium.Chromium.uL2zYA" 2026-07-11 11:09:34 45718 2026-07-11 11:09:34 d94c21168cd609c71236364758a4113e 746868 None guest users 600 None None 1 1783793374706672
2026-07-11 11:09:36 "/mnt/live/memory/changes/home/guest/.local/share/recently-used.xbel" 2026-07-11 11:09:36 45721 2026-07-11 11:09:36 5610e7208880f5b926b88d5f03c38b60 34406 None guest users 600 None None 1 1783793376075869
2026-07-11 11:09:36 "/mnt/live/memory/changes/home/guest/Downloads/rarlinux-x64-723\ap20(2).tar.gz" 2026-07-11 11:09:36 45718 2026-07-11 11:09:35 d94c21168cd609c71236364758a4113e 746868 None guest users 644 y 2026-07-11 11:09:34 1 1783793374706672
Have it tuned and above is a test with downloading winrar. Also if it throws an exception it closes the service to indicate something like a syntax error needs to be fixed with the script
any file above 1MB gets written to a seperate cache file that gets parsed on searches
So this seems to be the best way to do it even though it is possible to parse the usn jrnl on windows. I did this with a database system earlier and it takes up 90MB and is fragile because that system could change and break. Where as this is cross platform and is maintainable.
While it is more complicated it offers expandability to develope into a more useful feature down the line
recentchanges 6.2.0 07/10/2026
https://github.com/dreadwrr/Recentchanges-Linux
Find command runs in one process for both ctime and mtime. with relevant mounts being in another with time offset added
Created python Watchdog script
Added scientific calculator
Auto dark mode for porteus
requires user pin entry setup which may already be that way with nemesis. there are instructions on github
for further installing methods see post Changes:EXIT xzm (Post by dreadbird #105456)
So the next step is to make more artwork and documentation while the core can be stabilized over time. Adding more features especially ones that wont get used can lead to problems before ones that are already there are fixed
I have the wolverine I can make into an icon but I think Ill go with the dragon theme. But im working on a banner with the wolverine with ninjutsu style theming. So thats going to be the main artwork.
with inspiration from https://youtu.be/NWQKiefZ-XI?list=RDNWQKiefZ-XI
This can be a small insignia on the main app in some open space
Next update will have:
Green lcd on dark background (forgot to add in when adding watchdog and calculator)
File shannon
Doing more research as this can help consolidate everything and make any necessary core changes later easier by having proper structure. Currently implementing entropy and mimetype which is basically free because the file is read anyway. For the bash version I could make md5ent which would return hash entropy and mimetype so it doesnt have to read or open the file twice. But will have the default bash keep using md5sum and just add mimetype because they are already there and skip entropy as it would be good enough. For the bash python backend add the entropy and the new mime_types table.
for the python Integrate mime type behind the scenes. map the mime type to a number in mime_types table
will also look at using mime type directly to verify a file is an executable under that profile method. Currently the header is checked but can make use of python magic.
If a filetype has changed this is a prime candidate for hybrid analysis output
result will be having explored hanly and hanly logger for any improvements
So if there is a delta of .5 a warning and >= 1.00 elevate
a profile scan gets the changes since last. checksum, target change of symlink (or a file that wasnt a symlink but now is and vice versa), change in entropy and change in file type
then symmetric differences is the changes since first or profile creation. The above as well files that no longer exist, previously empty directories but now have files, new directories
The instantaneous change and then if symmetrics is checked the current state of change. This prevents repeat feedback and excessive information so it can be easily interpreted
07/19/2026
Have entropy, mime and target change in hanly and profile scans
blake2b is in which would turn off collision checks
converting it for the bash version and then by the time the art work is done should be able to catch anything that needs adjusting or missed
with the bash version leaving it the way it is as its just not scalable and dont want to introduce any dependencies. so by adding mime types to the search and hybrid analysis file doctrine can refresh on search
when the cache is parsed those files are created and can be put into an array. Then checked if its in it then labelled as Created in hybrid analysis along with Casmod.
the end result would be file_creation_log.txt to see created files and file doctrine refreshed on searches to see a different interpretation of the search results other than the diff file.
have the changes in the bash and just testing to see if everything is good. also tweaked inotify script with new modifications from watchdog script.
also added python-magic-standalone which has the updated magic.mgc database for windows. So between getting both windows and bash dialed in can add it to qt linux and python special edition
This is with optional sv-ttk package which is around 400kb for sun valley the dark mode. Can also use azure
I will also put in optional ttkbootstrap which is 700kb for the cyborg theme. so its looking really good at least it looks somewhat modern
I also added pagination so tkinter loads instantly even with 80k rows
Currently testing the bash and adding optimizations to the multiprocessing which is also looking good. So will continue to test and check the logic of inotify ect
New artwork
The above xRC icon will remove the background and scale it and put it somewhere
then had a bro make a nice banner
I may swap it out to just a silhouette of a figure running but will see how that goes
