Artifact updates
iOS
Aloha
NEW
Discord
Google Duo
Google Meet
Home Screen Items
NEW
Safari
Secret Photo Vault
Signal
Android
Google Duo
KakaoTalk
TextPlus
Windows
Magnet Webpage Saver
NEW
NTFS Timestamp Mismatch
NEW
macOS
Finder MRU
Safari
Artifacts
- Aloha Browser | iOS: Added support to recover bookmarks, browser history, and downloads. [2.22.3]
- Discord Messages | iOS: Updated support for parsing messages. [31]
- Finder MRU | macOS: Added support to recover the locations of data that was recently moved or copied.
- Google Duo Accounts | iOS: Updated support to recover account information. [91]
- Google Duo Activity | Android and iOS: Updated support to recover messages, audio calls, and video calls together. [89.0 for Android and 91.0 for iOS]
- Google Duo Users | iOS: Updated support to recover user information. [92.0]
- Google Meet | iOS: Updated support to recover accounts and meeting history. [43.0.31]
- Home Screen Items | iOS: Added support to recover information about the applications and folders on the home screen of iOS 12 and 13 devices, and the locations of these folders and applications on these devices.
- KakaoTalk Browsing History | Android: Updated support to recover web links accessed using the KakaoTalk application. [8.9.6]
- KakaoTalk Messages | Android: Updated support to identify more message types. [8.9.6]
- Magnet AXIOM now supports artifacts that can be recovered from the Magnet Webpage Saver Utility.
- NTFS Timestamp Mismatch | Windows: Added support for recovering the timestamps of files whose timestamps have been modified externally.
- Safari Tabs | iOS: Updated support for carving tabs. [11.2.1]
- Secret Photo Vault | iOS: Updated support to recover passcodes and open tabs. [2.4]
- TextPlus | Android: Updated support to recover calls, local accounts, and messages. [7.6.6]
Cloud
- Improvements to Facebook account acquisition.
Processing
- When importing a keyword list to perform all-content keyword searches in your case, AXIOM Process looks for matching bytes in little-endian byte order for keywords encoded using UTF-16 and UTF-32. Previously, AXIOM Process did not indicate that this method was used.
Examining
- Improvements to PDF exports.
- You can now select which summary information to include in HTML and PDF reports.
Bug fixes
- Gmail messages could not be acquired due to Google API changes. -CAO-3202
- Sometimes, you were unable to load previously generated iCloud backups. -CAO-3123
- Sometimes, when you tried to open the export dialogue in a case with media categorization enabled, AXIOM Examine would crash. -AXE-8423
- When acquiring Google accounts, some Google Activity would be missing. -CAO-3063
- When creating an HTML export that included a corrupted .zip file, the export would fail. -AXE-8411
- When exporting to Excel, the export file was corrupt. -AXE-8107
- When importing keyword lists containing non-ASCII characters, the imported keywords would be corrupted. -AXE-5665
- When trying to process an E01 and RAW images that contained corrupted data, an error message would appear and the image would not be loaded. -AXP-7079
- Full email bodies could not be recovered from Windows 10 Mail. -COMP-680
- In the Plist Viewer in AXIOM Examine, some formats of Plist files could not be opened by double-clicking on the file or using the dropdown menu. -MA-2165
- Messages with a video attachment from Textfree for iOS were being exported with the wrong filename. -MA-2090
- Some iMessages, and SMS and MMS messages were not being parsed during a full file system extraction using GrayKey. -MA-1895
Known issues
