Artifacts
- Apple Notes - Voice | iOS: Updated support for recovering the correct file path of the original recording for edited voice notes. [14.0]
- Grindr | Android: Added support for recovering social network information, including Facebook, Instagram, and Twitter account names for Grindr Buddies.
- Grindr | iOS: Updated support for recovering Messages and Group Members. [7.8.0]
- Grindr | iOS: Updated support for recovering conversation partner information. [7.6.0]
- Microsoft Office Backstage Items | Windows: Added support for recovering information about items found in the Backstage View of Microsoft Office applications. [16.0]
- Owner Information | iOS: Added support for recovering Directory Services Identifier (DSID) for AppleID accounts.
- Photos | iOS: Updated support for Photos Media Information from the latest version. [14.0]
- Snapchat | iOS: Added support for carving display names.
- Telegram | Android: Updated support for recovering user information from deleted accounts. [7.6]
- Tumblr | iOS: Updated support for recovering Chat Messages. [20.1]
- WeChat | iOS: Improvements to WeChat including recovering the duration of messages, recovering more message types, and recovering raw XML data for Picture, Location, Notice, and Pay message types. -MA-3161
- WhatsApp | Android: Updated support to include recovering messages from the latest version. [2.21.9.13]
- Wickr | Android: Updated support for file carving. [5.76.5]
- Zello | Android: Added support for recovering profiles and messages. [4.96.3]
- Zello | iOS: Added support for recovering profiles and messages. [4.98.1]
Bug fixes
- IEF was not correctly parsing .msg files from an Encase LX01 image. -COMP-1422
- IEF was not correctly parsing the embedded target path/filename in LNK files. -COMP-1352
- Android Messages incorrectly represented the Received Date/Time as the Original Transmit Date/Time. -MA-3200
- Message data from Apple Mail in iOS 14 was not correctly parsed and HTML previews were not available. -MA-3083
- Original Path data was not recovered for Apple Notes Voice for iOS 14 devices. -MA-2240
- Safari History incorrectly included default URLs from AutoFillQuirks.plist. -MA-3088
- The incorrect physical sector location was displayed for carved legacy Office Document files using the Microsoft Compound File Binary Format. -COMP-1375
- Improvements to recovering Google Photos Album Comments and added support for recovering Media ID for iOS. -MA-3172
- IEF had frequently missing thumbnails after processing video files using FFMPEG.
