Artifacts
- Additional sources: A new artifact category has been added called Additional sources. This category collects artifacts that may require additional processing, such as mobile backups and virtual machines.
- Airdrop Activity | macOS: Added support for recovering Airdrop activity, including incoming and outgoing transfers, discoverability, and background activity.
- Cell Tower Locations | iOS: Added support for identifying the locations of cell towers that a device pings.
- Chatous | Android: Added support for the Chatous app, including messages and chat partners.
- Cryptocurrency: Recover information about cryptocurrency clients and wallets recovered on the system.
- Google Maps | Windows: Recover Google Maps data from the web cache for IE 11.
- Instagram Profiles | iOS: Added support for recovering profile information. [111 and later]
- LG MPT | Android: Added support for recovering data from the MPT log on LG devices, including app details and history, cell towers, Wifi events, and recent activity.
- Messages | iOS: Recovered messages now indicate if they are Sent by Siri.
- Owner Information | iOS: Updated support to properly recover the Apple ID fragment in some versions. [iOS 13.1]
- Parked Car Locations | iOS: Recover parked car locations stored on the device (requires that the feature be enabled in the iOS Location Services).
- Pinterest | Android: Recover information about messages, following / followers, boards and pins.
- Pinterest | iOS: Recover information about messages, following / followers, boards and pins.
- SnapChat | iOS: Decrypt Memories recovered from images acquired using GrayKey. My Eyes Only snaps can also be recovered and decrypted if the snaps have been viewed locally and are available in the application's media cache.
- Snapchat | Android: Updated support to recover attachments from messages and memories on some versions. [10.68, 10.69]
- Tumblr Chat Messages | iOS: Added support for parsing sent and received messages, posts, tags, followed blogs, and blocked blogs.
- Twitter Friends | iOS: Updated support for recovering friends on latest versions. [7.56]
- WiFi Locations | iOS: Recover the locations of WiFi connections that the device has detected.
- Yahoo Webmail | Android: Updated support to recover account information on some versions. [6.1.2]
- iMessages/SMS/MMS | iOS: Attachments recovered from messages now properly link to the source message.
Bug fixes
- In the Locally Accessed Files artifact, some internal resources did not keep their URLs intact, and prefixes such as :host: were being stripped out. -COMP-580
- No results could be recovered for Outlook 2016 if the PST file was open in Outlook at the time of acquisition. -COMP-527
- Some carved hits were missing for WebKit-based browsers. -COMP-572
- Picture overlays were not be applied to Snapchat memories. -MA-1241
- Pictures recovered by the iOS Snapshots artifact weren't also showing up under the Pictures artifact. -MA-1187
