Artifacts

Android App Roles | Android: Added support for parsing the roles.xml file, which indicates which application a user or system has set to perform a function.
Application Permissions | Android: Added parsing and carving support to retrieve permissions used by each package and indicate what permissions have been granted by the user and requested by the application.
Chrome Keyword Search Terms | Windows: Updated support for Chrome Keyword Search Terms to show the last visited time in Magnet AXIOM. [4.9.1]
Chromebook: Added parsing and carving support to identify Chrome artifacts with Chromebook extractions, such as cache, cookies, last tab, media history, web history, and more.
Evernote | iOS: Updated support for recovering Evernote Notes data, including the note type, the file name, the creator, the owner, who the note was shared with, the last editor, and the notebook name.
Google Photo Album | iOS: Added support for recovering Google Photo Album comments. [5.8.328412793]
Houseparty | Android: Updated support for recovering Messages and Users Hits in the latest version of Houseparty. [1.54.0]
Houseparty | iOS: Updated support for recovering Messages and Users Hits in the latest version of Houseparty. [1.54.1]
Improvements to extract more data from attachments and thumbnails. Due to the nature of this change, you might experience longer scan times when scanning images that include many small attachment files.
Instagram | iOS: Updated support for Instagram Profiles to recover profile information of the Local User from different .plist files. [176.0]
Location History | iOS: Removed the Local User fragment from the Significant Locations and Significant Locations Visits artifacts as there was no data to report.
Owner Information | iOS: Updated support for the Owner Information artifact to recover iOS device model information.
Parler | Android: Updated support to include whether the activity was deleted, the repost count, number of upvotes, and number of downvotes and updated support for Parler Activity and Parler Users to include the "-Android" tag for Android artifacts.
Puffin Browser | iOS: Updated support for recovering Puffin Browser Bookmarks information. [5.2.5]
Runtime Permissions | Android: Added parsing and carving support to retrieve the permissions a user has granted or declined to an application.
Slack | Android: Added support for parsing one-to-one direct messages in Slack [20.9.10 and 20.10.10 onward].
Snapchat | Android and iOS: Updated support for the Type fragment to indicate message types with descriptive strings instead of numeric codes.
Snapchat | Android: Updating carving support for retrieving sender and recipient names. [11.17.0.37]
Snapchat | iOS: Updated carving support to recover Snapchat iOS messages from the Arroyo.db database.
Telegram | Android and iOS: Updated parsing support to recover Telegram data on video calls.
TextFree | iOS: Updated support for the Contacts, Groups, and Messages artifacts [11.84]
Viber | iOS: Added support for recovering attachments information for iOS Viber Messages.
WeChat | iOS: Updated support for recovering chat messages. [7.0.78]
Yahoo Mail Emails | Android: Updated parsing support to retrieve Android Yahoo Mail email attachments and message ID. [6.12.1]

Bug fixes

Significant Location Visits artifact data could not be parsed on iOS 14 devices. -MA-2772
Updated fragment names to be more specific for the following Cloud artifacts: Cloud Amazon S3 Files, Cloud Google Contacts, Cloud Google Photos (Warrant Return), Cloud Twitter Posts Public, Cloud Twitter Users, Cloud Twitter Users Public, Cloud Google Calendar Events, and Facebook Photos (Warrant Return). -MA-2583
Updated the "Category" fragment names to be more specific for the following Android and iOS artifacts: Android Snapchat Received Images, Android WhatsApp Profile Pictures, Instagram Media, Instagram Photos (Warrant Return), KakaoTalk Pictures, LINE Pictures, Live Photos, Pictures, Carved Video, Snapchat Received Videos, Snapchat Memories, TikTok Videos, and Videos. -MA-2576
Updated the "Location" fragment names to be more specific for the following Android and iOS artifacts: Whisper Posts (iOS only), Mail.ru Contacts, Outlook Appointments, Pebble Calendar Events, Pinterest Accounts, Pinterest Following, and Twitter Users. -MA-2582
When you exported Signal Messages .gif attachments from the picture artifact, the .gif files were converted to static .jpeg files. -MA-2774
When you loaded a World Map in Report Viewer with Lyft Last Known Location for iOS, you got an error and no points were mapped. -MA-2914
When you reviewed Samsung Messages in the Conversation View, the sender and recipient information were not displayed. -MA-2880