Firefox Cache Records | Android/Computer/macOS/Windows phone: Added; File Name, MD5, SHA1, PhotoDNA hash fragments to Firefox Cache Records.
Samsung Customization Service - Web Activity | Android: Added support for Web Activity (Samsung Browser only).
TeleGuard Channels | iOS: Added support for TeleGuard Channels.
TeleGuard Contacts | iOS: Added support for TeleGuard Contacts.
TeleGuard Messages | iOS: Added support for TeleGuard Messages.
TeleGuard Posts | iOS: Added support for TeleGuard Posts.

Facebook Messenger Messages | iOS: Updated carving support for Facebook Messenger messages.
Linux Binary Logs | Linux: Updated to check for default Unix timestamp.
Meta Warrant Return artifacts | Facebook/Instagram: Updated parsing method to support Meta Warrant returns.
Photos Media Information | iOS/ macOS: Updated to include Hash Fragments.
Signal, Session | iOS: Updated decryption for Signal and Session.
Telegram | Android: Updated parsing support for Telegram user names.
WeChat Accounts, WeChat Friends, WeChat Messages | Android: Updated decryption for WeChat Accounts, WeChat Friends, and WeChat Messages.
WhatsApp Messages | Android: Updated to included Sender Nickname and Receiver Nickname for local user.
WhatsApp Messages | iOS: Updated Group message Sender and Recipient values.
Telegram Messages | Android: Updated parsing support for identifying message attachments.

All warrant returns will now perform a file integrity check of the evidence source image rather than a warrant return validation that is specific to the platform.
Axiom Process now supports acquiring iCloud backups from Advanced Data Protection enabled accounts.

Axiom Process can integrate with Magnet Graykey Fastrak 1.11 to automatically process extracted images from Magnet Graykey Fastrak.
The menu in Tools->Settings for Axiom Process has been updated to group related settings together.

The Series column is now included for HTML and Excel reports.
In an effort to streamline our filters in the Artifact explorer, the Filter bar has been consolidated to the 5 main filters. Additional filters can now be accessed via the dropdown menu.
When filtering artifacts on date and time in Axiom Examine, you now have the option to include artifacts that do not have date/time values.

Previously, Axiom Process may have failed during processing of evidence stating database is locked. -ENGN-12761
Previously, Axiom Process may not have been able to verify the CLS license if a proxy is used for internet connectivity. -ENGN-12749
Previously, Axiom Process may not have located a nested deleted folder if another deleted folder also referenced the same cluster. -ENGN-12591
Previously, Axiom Process may have been unable to decrypt Bitlocker encrypted partitions. -ENGN-12557
Previously, Axiom Process may have failed a scan, stating ImageMagick is "Unable to find directory" in the logs. -ENGN-12751
Previously, creating a portable case may not have completed while the supporting case files continued to increase in size. -EXM-4232
Previously, media files exported from load file evidence sources may have been incorrectly saved as a .bin file. -EXE-913
Previously, exports that included the IE Cache records may have contained an incorrect datetime value. -EXM-4196
Previously, Hangul Word Processor documents (hwp, hwpx) would not allow the user to search for Hangul characters. This also prevented Preview Text encoding for hwpx files. -CARS-1177
Previously, carving for MKV videos may have resulted in reporting an incorrect file size and dropped hits. -CARS-1162
Security CVE-2019-0981: Addressed a potential denial of service vulnerability when .NET Framework or .NET Core improperly handle web requests. -CARS-1144
Previously, acquiring multiple iCloud backups may have timed-out if the duration exceeded one hour. -CA-2108
Previously, an acquisition of Facebook Messenger would stop if an error occurred during the acquisition of Facebook Marketplace messages. -CA-2528
Previously, Axiom Process may have become unresponsive after selecting Slack users from a Slack export. -CA-2485
Previously, Axiom Process may have become unresponsive when processing message attachments from a Slack export. -CA-2474
Previously, Axiom Process may have become unresponsive when searching for users in a large Slack Export (30K users). -CA-1322
Previously, Axiom Process may have crashed if an invalid Google Takeout was loaded. -CA-1845

To search for information about known issues, visit the knowledge base at support.magnetforensics.com.

Featured artifacts

Magnet Graykey Fastrak integration