Artifacts
- Apple Mail Recipients | iOS: Updated support to display every recipient as a separate identifier. [iOS 13]
- Apple Voice Notes | macOS: Updated support for previewing voice note recordings. [10.15]
- Application Activity | Android: Added support to recover values for the Origin activity and Last time moved fragments. [Android 10]
- Chrome Tab History | Android: Added support for recovering tab history. [80+]
- Chromium Tab History | Android: Added support for recovering tab history from the following Chromium based browsers: Brave, Ecosia, Edge, Iron, Kiwi, Samsung and Whale.
- Device Information | Android: Added support for recovering IMSI information. [Android 10]
- Device Information | iOS: Updated support to display device information fragments in a single hit. [iOS 13.0]
- Device Information | iOS: Added support to recover advertising identifiers. [13.1]
- Facebook Messenger Messages | iOS: Updated support for recovering attachments. [255]
- Houseparty Messages and Users | Android: Added support for recovering messages and user information. [1.41.1]
- Installed Applications | Android: Updated support for recovering data from installed applications. [Android 10]
- KnowledgeC | iOS: Added support for recovering application usage and web usage data. [iOS 10]
- KnowledgeC | macOS: Added support for recovering application usage and web usage data.
- LogMeIn Activity | macOS: Added support to recover LogMeIn remote desktop client activity data. [4.1.7]
- LogMeIn Activity | Windows: Added support to recover LogMeIn remote desktop client activity. [1.3.49]
- Photo Albums | iOS: Added support for recovering photo album data. [iOS 12 and 13]
- Private Photo Vault | iOS: Added support to recover albums and media information. [10.5]
- Safari History | macOS, Windows, iOS: Added support to identify whether a webpage was viewed on a local or synced device. [11.2.1]
- TeamViewer Activity | Windows: Added support to recover TeamViewer activity data. [15 and earlier]
- Text Free Messages and Groups | iOS: Updated support for recovering messages and group chat information. [11.52]
- Twitter Users | iOS: Updated support for recovering user data. [8.7+]
- Uber | Android: Updated support to recover accounts, profiles, and cached locations data. [4.313]
- Usage History | Android: Updated support for recovering application usage history. [Android 10]
- Wickr Decryption | iOS: Updated support for accepting multiple decryption keys in the Wickr decryption options dialog. [5.47.6]
- Wickr Me Messages | Android: Added support for recovering messages, message timestamps, and sender and recipient names. [5.47.6]
- Zalo Messages | iOS: Updated support for displaying message direction. [19.12.03]
- Zoom Contacts | Android: Added parsing support for the Contacts artifact. [4.6.11]
Bug fixes
- Android message data was not being parsed on Android 10 devices. -MA-1842
- Blank Chrome passwords were not being accepted for decryption. -COMP-909
- Facebook Messenger messages from different chat threads with the same user, were being grouped together in a single chat thread if there were multiple evidence items in a single case. -MA-1753
- Full email bodies could not be recovered from Windows 10 Mail. -COMP-680
- Group members were not being recovered from Snapchat for Android. -MA-1817
- Media files were not being recovered from Snapchat for iOS. -MA-1816
- On iOS devices, the following fragments were not being recovered from VK 5.0 or later: Deleted messages, Read state, Forwarded messages, Latitude and Longitude. -MA-1493
- Some artifact fragments were being incorrectly categorized as personal identifiers. -MA-1782
- The Last Accessed Time Enabled values that were recovered from Windows OS Information, were being displayed as negative numbers. -COMP-602
- The Sender name fragment was not being recovered from the Calls and Messages artifacts for KakaoTalk for Android. -MA-1871
- Wickr Me data was not being recovered if the Android user had an additional account set up on their device. -MA-1776