Artifacts
- Android Bluetooth Devices | Android: Updated support to provide additional Bluetooth devices from backup files. [Android 12]
- Bitcoin | Windows: Updated support to avoid excessive RAM usage.
- Chrome Logins | iOS: Added support for a new GUID fragment which can be used to look up the password in an Apple keychain.
- Chrome | Android: Added decryption support for Chrome Logins.
- Outlook Email | iOS and Android: Added support for the HxStore format to support recovering emails.
- Photos Media Information | iOS: Updated support to recover missing videos and images.
- SMS/MMS | Android: Updated support for carvers to report the local user (sender/recipient) and the received/sent date correctly.
- SMS/MMS | Android: Updated support to enhance recovery of Samsung SMS blocked messages.
- Snapchat | Android12: Updated support for Accounts Information artifact. [11.65.1.32]
- Telegram Messages | Android: Added support for recovering attachments and updated carving support for all message types.
- Telegram Users | Android: Updated support for recovering all user types and profile photos.
- Updated support for Cloud Passwords and Tokens to include Uber Accounts.
- WhatsApp Chats | Android: Updated support to include Unread message count and Missed call count fragments. [2.21.15.20+]
- WhatsApp | iOS: Updated support for recovering deleted messages from the latest version.
- Windows Mail | Windows: Added support for the HxStore format to support recovering emails.
Bug fixes
- AXIOM reported the local user (sender/recipient) and the received/sent date for Android SMS and MMS messages incorrectly. -MA-3721
- Improvements to displaying UTF-8 encoded characters recovered from the Apple Keychain. -MA-3938
- The Sent By Siri fragment did not indicate messages were sent by Siri in iOS 13 and iOS 14. -MA-3969
- The URL Analyzer was reporting blank timestamps when other timestamps were available. -MA-3987
- There was some data missing from carved text messages from devices running iOS. -MA-3903
- Updated support to fix Chrome login decryption support for Windows. -COMP-1731
- When running datasets, providing the ProtonMail decryption key was causing less hits. -MA-4013