Artifacts
- Activity Manager History | Android: Added support for recovering information about application usage. Also added support to show a running log of package times and the actions on a phone.
- Bluetooth Devices | Android: Updated support to recover information about previously connected Bluetooth devices, as recovered during Quick imaging.
- Camera History | Android: Added support to recover camera access times and a list of last known locations of a device.
- Device Information | Android: Updated support to display a device’s Bluetooth ID.
- Device Information | Android: Updated support to recover timezone information.
- Device Information | iOS: Updated support to recover iOS device model information, IMEIs, software version, and timezone information.
- Device Information | iOS: Added support for backup details, such as iCloud and iTunes sync information.
- Evernote | Android: Added carving support for notes, attachments, work chat, account details, and timestamps. [8.11]
- Evernote | Android: Added parsing support for account details, contacts, notes, attachments, timestamps, and work chat. [8.11]
- Installed Applications | Android: Updated support to recover information about installed apps when performing a Quick image.
- Last Known Location | Android: Adds a list of the last known locations of the Android device, as tracked by the GPS receiver.
- Pictures: Added support for recovering serial numbers from EXIF data.
- PowerLog Process Data Usage| iOS: Added support for recovering start and end dates and times, bundle IDs, process names, mobile bytes sent and received, and wifi bytes sent and received.
- PowerLog | Android: Updated support to recover information on application power usage.
- Powerlog App Usage | iOS: Added support for recovering timezone information.
- Snapchat | Android: Added support for recovering recipient lists from chat messages. [10.59.0+]
- Snapchat | iOS: Updated support for Conversations and added support for Group Chats. [10.59.0]
- Telegram | iOS: Updated to recover missing fragments, including message sent, date/time, images, message status, read status, flags, and attachment name(s). [5.1.1-5.9.1]
- Usage History | Android: Added support for recovering autofill information.
- WeChat | Android: Added support for recovering WeChat data from backups created using Xiaomi devices. New update
- WhatsApp | Windows: Added support to recover chat type information, sender and recipient IDs, and messages.
Bug fixes
- Pictures and stickers sent in the Line chat messages artifact could not be recovered. -MA-345
- Snapchat for Android wasn’t recovering video thumbnails. -MA-751
- Timeouts were occurring while recovering Windows 7 Prefetch Files. -COMP-167
- Timeouts were occurring while recovering Windows 8 Prefetch Files. -COMP-236
- In the Windows Event Logs artifact, event log ID 10016 was reporting additional erroneous text. -COMP-402 New update
